Self-hosted alternatives to fullstack-guardian

F

fullstack-guardian

Builds security-focused full-stack web applications

fullstack-guardian is an agent skill from the jeffallan claude-skills collection for building full-stack web applications with security applied at every layer. The skill's persona is a security-focused full-stack developer who implements frontend and backend parts of a feature together. Its workflow is a sequence: gather requirements and acceptance criteria, design the solution from three perspectives (frontend, backend and security), write a technical design document, pass a security checkpoint against a security checklist before any code is written, implement the parts incrementally with tests as it goes, and hand off to a test specialist for QA and to a DevOps role for deployment. The security checkpoint is the distinctive part: the agent confirms that authentication, authorisation, input validation and output encoding are addressed before implementation begins. The skill is useful for teams building web apps where security needs to be designed in rather than added later. It is listed on skills.sh, where the page shows install counts and GitHub stars for the collection. Its Gen Agent Trust Hub audit is marked as failing, which the FAQ lists, while Socket and Snyk pass. Install it with npx skills add https://github.com/jeffallan/claude-skills --skill fullstack-guardian.