Fullstack Guardian — защищённая full-stack разработка

web-development

Fullstack guardian is a Claude Code skill that builds security-focused full-stack web applications by addressing frontend, backend, and security simultaneously within a single implementation workflow. Reach for it when you need to ship a feature across both client and server at once, build a REST API with matching UI, wire frontend components to backend endpoints, create end-to-end data flows from database to UI, or implement CRUD with forms — all without leaving auth or security as an afterthought. The skill follows a structured workflow: gather requirements, write a technical design to specs/, run a security checklist before touching code, build incrementally, then hand off to Test Master and DevOps. It enforces server-side authentication and authorization, validates input on both layers, uses parameterized queries to prevent SQL injection, sanitizes output against XSS, keeps sensitive fields out of API responses, and refuses to hardcode secrets. Related skills in the catalog: secure-code-guardian covers security review of existing code, react-expert handles frontend only, devops-engineer manages deployment. The direction is end-to-end feature implementation, not auditing already-written code. Works well for monoliths, microservices, monorepos, real-time features, and architecture decisions; does not substitute for a dedicated penetration test or formal security audit.