Does this skill work with any programming language?

Yes, while the examples provided are in TypeScript, the architectural patterns and heuristics are applicable to any software development environment.

When should I apply multi-layered validation?

Use it when data crosses system boundaries, when multiple code paths reach vulnerable code, or when destructive operations like writing or deleting are involved.

How does this prevent bugs during testing?

By adding validation to layers like Business Logic and Environment Guards, you ensure that even if a test mocks the Entry Point, the underlying system remains protected from invalid states.

What are the four layers defined in this skill?

The layers are Entry Point (input rejection), Business Logic (contextual sense), Environment Guards (safety in specific contexts like testing), and Debug Instrumentation (forensics).

What is the primary goal of the Defense-in-Depth skill?

The primary goal is to make bugs structurally impossible by validating data at every layer it passes through, rather than relying on a single point of failure.

Defense-in-Depth Validation

Name: Defense-in-Depth Validation
Author: ed3dai

byed3dai

•

安全与测试

Implements multi-layered validation patterns to make data-driven bugs structurally impossible across the entire execution stack.

This skill provides a systematic framework for hardening codebases against invalid data by enforcing validation at every architectural boundary. Instead of relying on a single check that can be bypassed by mocks, refactoring, or alternative code paths, it guides developers through a robust four-layer approach—Entry Point, Business Logic, Environment Guards, and Debug Instrumentation. This ensures that data integrity is maintained from initial API boundaries down to the deepest system calls, creating a resilient architecture where bugs are prevented by design rather than just temporarily patched.

主要功能

01Debug instrumentation for forensic traceability of data flow

02Structural bug prevention for data crossing system boundaries

0345 GitHub stars

04Four-layer validation framework (Entry, Business, Environment, Debug)

05Decision heuristics for determining necessary validation depth

06Environment guards to protect against destructive operations in tests

使用场景

01Hardening public APIs and system boundaries against malformed input

02Securing destructive operations like file deletions or database initializations

03Eliminating hard-to-reproduce bugs caused by invalid data passing through mocks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ed3dai/ed3d-plugins defense-in-depth

For use in Claude.ai and ChatGPT

Download Skill