Skills global-validation

📦

global-validation

Content revision r1 Safe ⚙️ External commands📁 Filesystem access

Strengthen Application Validation

Input validation gaps create security, data quality, and user experience problems. This skill guides secure validation rules, sanitization, error messages, and consistency across entry points.

Supports: Claude Codex Code(CC)

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "global-validation" from https://skillstore.io/skills/devanb-global-validation.md and its manifest at https://skillstore.io/api/skills/devanb-global-validation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/devanb-global-validation.md Signed manifest GET /api/skills/devanb-global-validation/manifest Signed lockfile GET /api/skills/devanb-global-validation/lockfile

Test it

Using "global-validation". Validate a user registration form.

Expected outcome:

Required name, email, password, and consent fields are checked on the server.
Email format and password length rules are explicit.
Each failure message explains the specific field problem.

Using "global-validation". Review validation for a file upload endpoint.

Expected outcome:

Allowed file types, maximum size, and required metadata are defined.
Server-side checks run before storage or processing.
Error messages tell users which upload rule failed.

Using "global-validation". Plan validation for a payment transfer request.

Expected outcome:

Amount, currency, account identifiers, and date ranges are validated.
Business rules check available balance and transfer limits.
Invalid requests fail before any account state changes.

Security Audit

Safe

v11 • 7/9/2026 Open versioned report

Two static findings are false positives: markdown code formatting and a business validation example. The parent-directory markdown link is confirmed because it directs use of a file outside the packaged skill boundary.

1

Files scanned

29

Lines analyzed

1

Review items

0

False positives ignored

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

Path traversal sequence

[global validation](../../../agent-os/standards/global/validation.md)

Line 28 links to ../../../agent-os/standards/global/validation.md outside the skill directory, and line 27 instructs readers to use it. This can cause out-of-package file access and makes marketplace review incomplete.

Risk Factors

⚙️ External commands (1)

📁 Filesystem access (1)

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Security Assessment

Copy report link

https://skillstore.io/skills/devanb-global-validation/audits/11?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/devanb-global-validation/security.svg)](https://skillstore.io/skills/devanb-global-validation?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/devanb-global-validation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devanb-global-validation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/devanb-global-validation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

DevanB. (2026). global-validation security audit report (audit version 11) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devanb-global-validation/audits/11

BibTeX citation

@techreport{devanb-devanb-global-validation-2026,
  author = {DevanB},
  title = {global-validation security audit report (audit version 11)},
  institution = {Skillstore},
  year = {2026},
  number = {11},
  url = {https://skillstore.io/skills/devanb-global-validation/audits/11},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "global-validation security audit report (audit version 11)"
version: "unspecified"
type: report
authors:
  - name: "DevanB"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/devanb-global-validation/audits/11"
identifiers:
  - type: other
    value: "skillstore:devanb-global-validation:audit:11"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

EIS-ITS Recommended

eis-its-global-validation

Skillstore Score 79

Evidence Confidence High

Skillstore usage 11

Updated

2026-08-21

DevanB Current

devanb-global-validation

Skillstore Score 78

Evidence Confidence High

Skillstore usage 7

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

55

Architecture

85

Maintainability

87

Content

70

Community

83

Spec Compliance

What You Can Build

Secure API Input

Design validation for request payloads before controller, service, or persistence logic uses submitted data.

Improve Form Validation

Add clear server-side rules and user-facing messages while keeping client-side checks as a usability layer.

Standardize Validation Reviews

Review validation coverage across forms, APIs, uploads, custom validators, and background jobs.

Try These Prompts

Add Basic Rules

Use global-validation to add server-side validation for this form. Include required fields, type checks, allowlists, and clear error messages.

Validate API Input

Use global-validation to validate this API endpoint. Cover payload shape, allowed values, ranges, sanitization needs, and failure messages.

Audit Existing Rules

Use global-validation to review these validation rules. Identify missing server-side checks, weak allowlists, vague errors, and unvalidated entry points.

Design Validation Coverage

Use global-validation to design a validation plan for forms, APIs, uploads, background jobs, and business rules in this feature.

Best Practices

Apply validation on the server for every entry point, even when client-side checks exist.
Use allowlists for accepted values, file types, formats, and ranges.
Write specific error messages that help users fix one field at a time.

Avoid

Relying only on client-side validation for security decisions.
Accepting broad free-form values when a defined allowlist is possible.
Returning vague validation errors that hide which field failed.

Frequently Asked Questions

Which AI tools can use this skill?

The report marks it as compatible with Claude, Codex, and Claude Code.

Is this a validation library?

No. It is guidance for adding and reviewing validation in application code.

Does it enforce validation automatically?

No. You still need to implement rules, sanitization, error handling, and tests in your project.

Can it help with Laravel projects?

Yes. The skill mentions form request classes and general validation across controllers, services, and APIs.

Does it cover sanitization?

Yes. It includes sanitization concerns for SQL injection, XSS, and command injection.

What should authors fix before publishing?

They should package the referenced standards or replace the parent-directory link with inline guidance.

Developer Details

Author

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/DevanB/lucidlog/tree/master/.claude/skills/global-validation

Ref

0519034dad657fb1f7706e0550e962beeda73fdf

Maintenance freshness

7/18/2026

Usage

4 downloads · 217 views

File structure

More from DevanB

global-commenting

Write Clear Evergreen Code Comments

Teams often add comments that become stale or repeat obvious code. This skill guides AI assistants to write minimal comments that explain non-obvious decisions.

Coding & Development View

backend-models

Build Reliable Backend Models

Backend teams need consistent model definitions that match database and ORM standards. This skill guides AI assistants through model naming, relationships, casts, validation, factories, and seeders.

Coding & Development View

backend-api

Build RESTful Backend APIs

Backend API work often stalls on routing, versioning, and response standards. This skill guides Claude, Codex, and Claude Code through consistent REST endpoint design and implementation.

Coding & Development View

global-conventions

Standardize Team Development Conventions

Teams often lose time when project structure, commits, reviews, and configuration practices differ between contributors. This skill gives Claude, Codex, and Claude Code a shared checklist for consistent development conventions.

Documentation View

backend-migrations

Create Safe Backend Migrations

Database schema changes can break deployments when migrations lack rollback plans or compatibility checks. This skill guides Claude, Codex, and Claude Code toward focused migrations.

Coding & Development View

frontend-components

Build Reusable Frontend Components

Large frontend components are hard to reuse, test, and maintain. This skill guides Claude, Codex, and Claude Code to create focused React components with clear props and state boundaries.

Coding & Development View

auth-handler

Protect Next.js Auth Routes

by AayushBaniya2006

Authentication changes often fail when teams mix session APIs and route guards. This skill guides Claude, Codex, and Claude Code toward the project helpers for secure access control.

Security & Compliance View

backend-security-coder

Build Secure Backend Services

by sickn33

Backend flaws can expose data, accounts, and infrastructure. This skill guides secure implementation and review using established defensive patterns.

Security & Compliance View

laravel-security-audit

Audit Laravel Security Risks

by sickn33

Laravel applications can hide authorization, validation, and deployment weaknesses. This skill guides Claude, Codex, and Claude Code through structured security reviews.

Security & Compliance View

security-review

Review Web App Security Before Release

by sickn33

Security issues often appear when teams add authentication, APIs, payments, uploads, or sensitive data flows. This skill provides a focused checklist and review prompts for finding common web application risks before deployment.

Security & Compliance View

api-security-testing

Plan API Security Testing

by sickn33

API reviews can miss authorization flaws, unsafe inputs, weak rate limits, and exposed errors. This skill organizes authorized REST and GraphQL testing into seven focused phases.

Security & Compliance View

building-agents

Build Claude Code Agents

by C0ntr0lledCha0s

Creating reliable AI agents requires clear schemas, safe tools, and repeatable review steps. This skill guides agent design, validation, migration, and maintenance for Claude Code workflows.

Coding & Development View