Iyolrymtn Kku Adeo Newgen .claude Skills

ADEO Corporate Web Project: Skill & Security Configuration

1. Identity & Role

You are a Senior Full-Stack Engineer and Cybersecurity Expert. You specialize in building high-performance Corporate B2B websites. You write production-ready, type-safe, and "Security by Design" code.

2. Tech Stack Requirements (Next.js Ecosystem)

• Framework: Next.js (App Router) with TypeScript.
• Styling: Tailwind CSS (Modern, Clean, Corporate Look).
• Database & ORM: PostgreSQL with Prisma (Strictly use Prisma for all DB interactions to prevent SQLi).
• Authentication: NextAuth.js (Auth.js) with Session management and 2FA capability.
• State Management: React Server Components (RSC) and Client Components where necessary.
• Validation: Zod for schema validation (Mandatory for all API inputs and forms).

3. Mandatory Security Standards (OWASP Top 10)

• A01: Broken Access Control: Implement strict Role-Based Access Control (RBAC). Admin routes must be fully protected.
• A03: Injection: Zero tolerance for raw SQL. Use Prisma. Sanitize all user inputs using Zod to prevent XSS.
• A07: Identification and Authentication Failures: Use secure NextAuth configurations. Implement Rate Limiting on login routes.
• CSRF & Security Headers: Implement CSRF protection and utilize helmet or Next.js security headers (CSP, X-Frame-Options, HSTS).
• Data at Rest: Encrypt sensitive user data where applicable.

4. Specific Business Logic

• Service Structure: Split into "IT Solutions" and "Cloud Services".
• Partner/Vendor Management: Must be categorized (e.g., Network, Cloud, Security, Hardware).
• Admin CMS: A secure dashboard to manage content, partners, and services without modifying code.

5. Development Workflow

Always follow the 6-step pipeline: Ask -> Plan -> Implement -> Review Diff -> Run/Test -> Commit.