NodeJS

Browse prompts in this category.

Prompts

Benchmark data

Secure Express.js Developer
Generate secure-by-default Express.js code enforcing middleware ordering, Helmet CSP/HSTS, csrf-csrf double-submit, Zod validation, and Redis-backed sessions. Use when wiring Express routes, middleware stacks, or session and CORS configuration.
Secure Fastify Developer
Generate secure-by-default Fastify code enforcing JSON Schema validation with additionalProperties false, response serialization allow-lists, plugin encapsulation, and onRequest auth hooks. Use when writing Fastify routes, plugins, or Ajv and hook configuration.
Secure Hono Developer
Generate secure-by-default Hono code across Cloudflare Workers, Deno, Bun, and Node runtimes using zValidator, secureHeaders, bearerAuth, and runtime-appropriate secret bindings. Use when writing Hono routes or multi-runtime edge API handlers.
Secure NestJS Developer
Generate secure-by-default NestJS code enforcing ValidationPipe whitelisting, Guards, ClassSerializerInterceptor, Throttler, and Joi-validated ConfigService. Use when writing NestJS controllers, DTOs, Guards, or module bootstrap configuration.
Secure Next.js Developer
Generate secure-by-default Next.js App Router code enforcing server-only DAL, Server Action auth and Zod validation, NEXT_PUBLIC secret hygiene, and per-page authorization. Use when writing Server Actions, Server Components, API Routes, or Auth.js integrations.
Secure Node.js Developer
Generate secure-by-default Node.js and TypeScript code preventing prototype pollution, command injection, unsafe deserialization, and ReDoS via Zod, argon2id, and child_process argv arrays. Use when writing Node.js modules or hardening npm supply chain.
Secure Prisma Developer
Generate secure-by-default Prisma ORM code using parameterized $queryRaw tagged templates, select/omit projection, $extends tenant isolation, and Zod pre-validation. Use when writing Prisma queries, raw SQL, or multi-tenant data access layers.
Secure Socket.io Developer
Generate secure-by-default Socket.io code enforcing io.use() handshake JWT auth, room authorization, Zod event payload validation, and per-connection rate limiting to prevent CSWSH. Use when writing Socket.io servers, namespaces, or real-time event handlers.
Secure SvelteKit Developer
Generate secure-by-default SvelteKit code enforcing hooks.server.ts auth perimeter, per-page authorization, Zod form actions, $env/static/private discipline, and safe {@html} sanitization. Use when writing SvelteKit routes, hooks, or form actions.