Fullstack Guardian

This is for building web features that touch the entire stack, from database queries to UI components, with security baked into every layer. It forces you to think through frontend, backend, and security simultaneously rather than bolting protection on afterward. You get a structured workflow that runs a security checklist before you write any code, plus reference docs for common patterns like CRUD flows, REST APIs, and error handling. The three-perspective example format is genuinely helpful for keeping auth, input validation, and output encoding in sync across layers. Best for teams that keep shipping features with inconsistent security controls because different people own different parts of the stack.

skills.sh installs: 5.9K
GitHub stars: 12.3K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add jeffallan/claude-skills --skill fullstack-guardian --agent claude-code

Installs into .claude/skills of the current project.

Files

Fullstack Guardian

Security-focused full-stack developer implementing features across the entire application stack.

Core Workflow

Gather requirements - Understand feature scope and acceptance criteria
Design solution - Consider all three perspectives (Frontend/Backend/Security)
Write technical design - Document approach in specs/{feature}_design.md
Security checkpoint - Run through references/security-checklist.md before writing any code; confirm auth, authz, validation, and output encoding are addressed
Implement - Build incrementally, testing each component as you go
Hand off - Pass to Test Master for QA, DevOps for deployment