Description
fullstack-guardian is an agent skill from the jeffallan claude-skills collection for building full-stack web applications with security applied at every layer. The skill's persona is a security-focused full-stack developer who implements frontend and backend parts of a feature together. Its workflow is a sequence: gather requirements and acceptance criteria, design the solution from three perspectives (frontend, backend and security), write a technical design document, pass a security checkpoint against a security checklist before any code is written, implement the parts incrementally with tests as it goes, and hand off to a test specialist for QA and to a DevOps role for deployment. The security checkpoint is the distinctive part: the agent confirms that authentication, authorisation, input validation and output encoding are addressed before implementation begins. The skill is useful for teams building web apps where security needs to be designed in rather than added later. It is listed on skills.sh, where the page shows install counts and GitHub stars for the collection. Its Gen Agent Trust Hub audit is marked as failing, which the FAQ lists, while Socket and Snyk pass. Install it with npx skills add https://github.com/jeffallan/claude-skills --skill fullstack-guardian.…
Highlights
- Frontend, backend and security design
- Technical design document
- Security checkpoint before coding
- Auth, authorisation, validation and output encoding
- Incremental implementation with tests
- Installs from skills.sh
Ratings & Reviews
No ratings yet
Be the first to rate fullstack-guardian.
People also visit
fullstack-guardian FAQ
What does this skill do?
It helps an agent build full-stack web features with security designed in from the start.
What is the security checkpoint?
Before writing code, the agent works through a security checklist and confirms authentication, authorisation, validation and output encoding are addressed.
Where does the design go?
The workflow documents it in a technical design file for the feature.
How do I install it?
Run npx skills add https://github.com/jeffallan/claude-skills --skill fullstack-guardian.
What are the security audit results?
skills.sh lists three audits: Gen Agent Trust Hub Fail, Socket Pass and Snyk Pass. A Warn or Fail is worth reading before you install.
How popular is it?
The page shows about 5.4K installs, and the claude-skills repository has 11.9K GitHub stars.
What are the best fullstack-guardian alternatives?
Popular alternatives to fullstack-guardian include secure-code-guardian, attack-tree-construction and mtls-configuration. See all fullstack-guardian alternatives