Input validation
Skill kimtth/agent-skill-100-lines-or-less/skills/input-validation
Use when: validate and sanitize untrusted input at boundaries to prevent bad data and attacks.From its SKILL.md
npx -y skills add kimtth/agent-skill-100-lines-or-less --skill input-validationAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.1 KB, 202 tokens by cl100k_base, as published. Nobody here has run it
Goal: reject or normalize untrusted input before it reaches logic.
Use for:
- handling user input, request bodies, and external data
- preventing injection and corrupt-state bugs
- defining a schema and rules at the boundary
Workflow:
- Validate at the trust boundary, as early as possible.
- Use an allowlist: accept known-good, reject the rest.
- Check type, range, format, and length explicitly.
- Normalize encoding before validating to avoid bypasses.
- Return clear, specific validation errors.
- Encode output for its destination context separately.
Patterns:
- schema validation for structured payloads
- allowlist over blocklist
- parse into typed values, do not pass raw strings around
- separate validation from business logic
Rules:
- never trust input; validate every external boundary
- prefer allowlists; blocklists miss cases
- validation is not a substitute for parameterized queries/encoding
- fail with specific, non-leaky error messages
What ships with it
Read from the repository
Just SKILL.md. No reference files, no scripts.