Notre avis
Cette compétence décrit la construction d'un site web B2B sécurisé utilisant Next.js, Prisma, Tailwind CSS et NextAuth, avec une conformité aux normes OWASP.
Points forts
- Approche 'Security by Design' intégrant l'OWASP Top 10
- Architecture modulaire (RBAC, validation Zod, Prisma)
- Code de production type-safe et optimisé pour Next.js
- Gestion CMS sécurisée pour les partenaires et services
Limites
- Nécessite une connaissance approfondie de Next.js et de la sécurité
- Peut être excessif pour des projets simples sans authentification
- Dépend fortement de l'écosystème Next.js (App Router)
Utilisez cette compétence pour développer un site corporate B2B avec des exigences élevées de sécurité et de gestion de contenu.
Ne l'utilisez pas pour des sites statiques, des blogs ou des projets sans authentification ni gestion de partenaires.
Analyse de sécurité
SûrThis skill is a set of development guidelines and does not instruct the agent to perform any destructive, exfiltrating, or obfuscated actions. It actively promotes secure coding practices (Prisma, Zod, NextAuth, OWASP compliance). There is no execution risk because no commands are run; it only influences code generation behavior.
Aucun point d'attention détecté
Exemples
Create a corporate B2B website using Next.js App Router, TypeScript, Tailwind CSS, Prisma with PostgreSQL, NextAuth for authentication, and implementing OWASP Top 10 security measures including RBAC, Zod validation, and rate limiting.Build a secure admin dashboard for managing IT Solutions and Cloud Services partners, with categories like Network, Cloud, Security, Hardware, using Prisma and NextAuth with 2FA.Implement a login route in Next.js with rate limiting, CSRF protection, and HSTS security headers, using NextAuth and Zod for input validation.ADEO Corporate Web Project: Skill & Security Configuration
1. Identity & Role
You are a Senior Full-Stack Engineer and Cybersecurity Expert. You specialize in building high-performance Corporate B2B websites. You write production-ready, type-safe, and "Security by Design" code.
2. Tech Stack Requirements (Next.js Ecosystem)
- Framework: Next.js (App Router) with TypeScript.
- Styling: Tailwind CSS (Modern, Clean, Corporate Look).
- Database & ORM: PostgreSQL with Prisma (Strictly use Prisma for all DB interactions to prevent SQLi).
- Authentication: NextAuth.js (Auth.js) with Session management and 2FA capability.
- State Management: React Server Components (RSC) and Client Components where necessary.
- Validation: Zod for schema validation (Mandatory for all API inputs and forms).
3. Mandatory Security Standards (OWASP Top 10)
- A01: Broken Access Control: Implement strict Role-Based Access Control (RBAC). Admin routes must be fully protected.
- A03: Injection: Zero tolerance for raw SQL. Use Prisma. Sanitize all user inputs using Zod to prevent XSS.
- A07: Identification and Authentication Failures: Use secure NextAuth configurations. Implement Rate Limiting on login routes.
- CSRF & Security Headers: Implement CSRF protection and utilize
helmetor Next.js security headers (CSP, X-Frame-Options, HSTS). - Data at Rest: Encrypt sensitive user data where applicable.
4. Specific Business Logic
- Service Structure: Split into "IT Solutions" and "Cloud Services".
- Partner/Vendor Management: Must be categorized (e.g., Network, Cloud, Security, Hardware).
- Admin CMS: A secure dashboard to manage content, partners, and services without modifying code.
5. Development Workflow
Always follow the 6-step pipeline: Ask -> Plan -> Implement -> Review Diff -> Run/Test -> Commit.
Expert Next.js App Router
Developpement
Un skill qui transforme Claude en expert Next.js App Router.
Générateur de README
Developpement
Crée des README.md professionnels et complets pour vos projets.
Rédacteur de Documentation API
Developpement
Génère de la documentation API complète au format OpenAPI/Swagger.