jyjeanne/input-validation-zod
skills/input-validation-zod/SKILL.md
To validate incoming request data (body, query, params) against a strict schema before processing it, ensuring type safety and data integrity. Use when: When accepting any user input; When defining TypeScript interfaces for API requests; When preventing injection attacks and malformed data issues.
$ install --global
skillsauthnpx skillsauth add jyjeanne/ai-setup-forge input-validation-zodInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 6, 2026, 11:35 AM5.5s1 file scanned
SKILL.md
- name:
- input-validation-zod
- description:
- To validate incoming request data (body, query, params) against a strict schema before processing it, ensuring type safety and data integrity. Use when: When accepting any user input; When defining TypeScript interfaces for API requests; When preventing injection attacks and malformed data issues.
Purpose
To validate incoming request data (body, query, params) against a strict schema before processing it, ensuring type safety and data integrity.
When to Use
- When accepting any user input.
- When defining TypeScript interfaces for API requests.
- When preventing injection attacks and malformed data issues.
Procedure
- Define Schema: Create a Zod schema defining the expected shape (e.g.,
z.object({ email: z.string().email() })). - Infer Type: Export the TypeScript type from the schema (
type CreateUserDto = z.infer<typeof UserSchema>). - Create Middleware:
- Write a middleware that accepts a schema.
- In the middleware, run
schema.parse(req.body). - If valid, replace
req.bodywith the parsed (sanitized) data. - If invalid, catch the ZodError and return a 400 Bad Request with detailed field errors.
- Attach to Route: Add the middleware before the controller.
Constraints
- Validate "strip unknown" to prevent pollution (Zod does this by default with
.parse(), or explicit.strict()). - Validate data types, formats (email, uuid), and lengths.
- Do not trust client-side validation alone.
Expected Output
A robust validation layer that rejects invalid requests early and provides typed request bodies to controllers.
Related Skills
jyjeanne/legacy-circuit-mockups
development
VerifiedTrustedCommunity
Generate breadboard circuit mockups and visual diagrams using HTML5 Canvas drawing techniques. Use when asked to create circuit layouts, visualize electronic component placements, draw breadboard diagrams, mockup 6502 builds, generate retro computer schematics, or design vintage electronics projects. Supports 555 timers, W65C02S microprocessors, 28C256 EEPROMs, W65C22 VIA chips, 7400-series logic gates, LEDs, resistors, capacitors, switches, buttons, crystals, and wires.
1SKILL.mdUpdated Apr 6, 2026
jyjeanne/lean-ux
development
VerifiedTrustedCommunity
Apply lean thinking to UX: hypothesis-driven design, collaborative sketching, and rapid experiments instead of heavy deliverables. Use when the user mentions "Lean UX", "design hypothesis", "UX experiment", "collaborative design", or "outcome over output". Covers hypothesis statements, MVPs for UX, and cross-functional collaboration. For Build-Measure-Learn, see lean-startup. For usability audits, see ux-heuristics.
1SKILL.mdUpdated Apr 6, 2026
jyjeanne/lean-startup
development
VerifiedTrustedCommunity
Design MVPs, validated learning experiments, and pivot-or-persevere decisions using Build-Measure-Learn. Use when the user mentions "MVP scope", "validated learning", "pivot or persevere", "vanity metrics", or "test assumptions". Covers innovation accounting and actionable metrics. For 5-day prototype testing, see design-sprint. For customer motivation analysis, see jobs-to-be-done.
1SKILL.mdUpdated Apr 6, 2026
jyjeanne/langsmith
tools
VerifiedTrustedCommunity
Instrument, trace, evaluate, and monitor LLM applications and AI agents with LangSmith. Use when setting up observability for LLM pipelines, running offline or online evaluations, managing prompts in the Prompt Hub, creating datasets for regression testing, or deploying agent servers. Triggers on: langsmith, langchain tracing, llm tracing, llm observability, llm evaluation, trace llm calls, @traceable, wrap_openai, langsmith evaluate, langsmith dataset, langsmith feedback, langsmith prompt hub, langsmith project, llm monitoring, llm debugging, llm quality, openevals, langsmith cli, langsmith experiment, annotate llm, llm judge.
1SKILL.mdUpdated Apr 6, 2026