# Strengthen Application Validation

Input validation gaps create security, data quality, and user experience problems. This skill guides secure validation rules, sanitization, error messages, and consistency across entry points.

## Install

```bash
npx skillstore add devanb/global-validation
```

## Metadata

- Status: approved
- Slug: devanb-global-validation
- Skillstore revision: r1
- Version status: missing
- Tree hash: 21003fde08dbb808977c00ff764c04ec7cfc6ba512791fdf2faba16a0997df25
- Author: DevanB
- GitHub username: DevanB
- License: MIT
- Repository: https://github.com/DevanB/lucidlog/tree/master/.claude/skills/global-validation
- Ref: 0519034dad657fb1f7706e0550e962beeda73fdf
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, filesystem
- Quality score: 78
- Quality tier: bronze
- Public page: https://skillstore.pages.dev/skills/devanb-global-validation
- Manifest: https://skillstore.pages.dev/api/skills/devanb-global-validation/manifest

## Capabilities

- Guides creation of server-side validation for forms, APIs, controllers, services, and background jobs.
- Encourages allowlist-based rules for accepted types, formats, ranges, and required fields.
- Covers input sanitization concerns for SQL injection, XSS, and command injection.
- Promotes specific validation error messages that help users correct invalid input.
- Includes validation considerations for file uploads, custom validators, and business rules.

## Use Cases

- Secure API Input: Design validation for request payloads before controller, service, or persistence logic uses submitted data.
- Improve Form Validation: Add clear server-side rules and user-facing messages while keeping client-side checks as a usability layer.
- Standardize Validation Reviews: Review validation coverage across forms, APIs, uploads, custom validators, and background jobs.

## Prompt Templates

### Add Basic Rules

```
Use global-validation to add server-side validation for this form. Include required fields, type checks, allowlists, and clear error messages.
```

### Validate API Input

```
Use global-validation to validate this API endpoint. Cover payload shape, allowed values, ranges, sanitization needs, and failure messages.
```

### Audit Existing Rules

```
Use global-validation to review these validation rules. Identify missing server-side checks, weak allowlists, vague errors, and unvalidated entry points.
```

### Design Validation Coverage

```
Use global-validation to design a validation plan for forms, APIs, uploads, background jobs, and business rules in this feature.
```

## Limitations

- The packaged skill is brief and delegates detailed standards to an external relative file.
- It does not include ready-to-run validation code or tests.
- It does not define framework-specific rule syntax beyond the Laravel request path example.
- It cannot replace threat modeling, security testing, or product-specific business rule review.

## Best Practices

- Apply validation on the server for every entry point, even when client-side checks exist.
- Use allowlists for accepted values, file types, formats, and ranges.
- Write specific error messages that help users fix one field at a time.

## Anti Patterns

- Relying only on client-side validation for security decisions.
- Accepting broad free-form values when a defined allowlist is possible.
- Returning vague validation errors that hide which field failed.

## Security Audit

- Audited at: 2026-07-09T11:23:50.303\+00:00
- Summary: Two static findings are false positives: markdown code formatting and a business validation example. The parent-directory markdown link is confirmed because it directs use of a file outside the packaged skill boundary.

## Stats

- Views: 217
- Downloads: 7
- Favorites: 0
- Popularity score: 0