Skip to content

Fullstack Guardian

Builds security-focused web features spanning database, API, and UI with auth and validation at each layer

Stars
12,176
Licence
MIT
Files
11 files

What it does

When installed, the agent plans and builds full-stack web features (database, backend API, and frontend UI) together, applying security checks at every layer: authentication, authorization, input validation on client and server, output encoding, and parameterized database queries. It follows a workflow of gathering requirements, writing a short design document, running a security checklist, then implementing and testing in small steps. It also loads reference guides on topics such as error handling, API design, and architecture choices when relevant.

Great for

  • Developers building CRUD features or REST endpoints with matching UI forms
  • Teams wanting a security-first checklist applied to new web features
  • Developers making technology selection or monolith versus microservices decisions

Skip it if

  • Projects that only need a frontend or only a backend change, since the skill is designed around the full stack and may add unnecessary structure
  • Production security sign-off: the guidance is a checklist and examples, not an audit, so a qualified security review is still needed for sensitive systems

Try asking

  • “Build a full-stack feature to let users update their profile, with a REST endpoint and form”
  • “Add an authenticated API route and connect it to a React component with error handling”
  • “Design the data flow from database to UI for a new orders dashboard”
  • “Help me choose between a monolith and microservices for this web app”
Step-by-step guide: how to use Fullstack GuardianInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 11 original files, the MIT licence and an attribution note.

    fullstack-guardian.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip fullstack-guardian.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip fullstack-guardian.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • State your acceptance criteria and stack (for example FastAPI and React) up front so the agent's examples match your project
  • Ask the agent to write the design document first and review it before any code is generated
  • Treat the generated security notes as a starting point and verify auth and authorization logic with tests

What's inside

  • references/api-design-standards.md
  • references/architecture-decisions.md
  • references/backend-patterns.md
  • references/common-patterns.md
  • references/deliverables-checklist.md
  • references/design-template.md
  • references/error-handling.md
  • references/frontend-patterns.md
  • references/integration-patterns.md
  • references/security-checklist.md
  • SKILL.md

Redistributed unmodified from Jeffallan/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.