gh-greyhaven-ai-claude-code-config-grey-haven-plugins-security/skills/security-practices/examples/INDEX.md

Security Practices Examples

Real-world security implementation examples for Grey Haven's TanStack Start and FastAPI stack.

Available Examples

1. Input Validation - Comprehensive input validation patterns

   • Zod schemas for TypeScript
   • Pydantic models for Python
   • Common validation patterns

2. Multi-Tenant RLS - Row Level Security implementation

   • RLS policies for PostgreSQL
   • Tenant isolation in queries
   • Testing tenant separation

3. Secret Management - Doppler integration

   • Setting up Doppler
   • Accessing secrets in code
   • Environment-specific configs

4. Rate Limiting - Redis-based rate limiting

   • Per-user rate limits
   • Per-endpoint limits
   • Graceful degradation

Recommended Path

For new projects:

1. Start with secret-management-example.md
2. Implement input-validation-example.md
3. Add multi-tenant-rls-example.md
4. Finish with rate-limiting-example.md

For security reviews:

1. Check multi-tenant-rls-example.md for data leakage
2. Verify input-validation-example.md is applied
3. Audit secret-management-example.md compliance

Quick Reference

TypeScript/React Security

• See input-validation-example.md
• See multi-tenant-rls-example.md

Python/FastAPI Security

• See input-validation-example.md
• See multi-tenant-rls-example.md

Related Materials

• Security Checklist - Pre-deployment verification
• OWASP Top 10 Reference - Common vulnerabilities
• Configuration Guide - Complete settings

---

Total Examples: 4 comprehensive guides Stack Coverage: TanStack Start + FastAPI Last Updated: 2025-11-09