plan-input-validation

Plan-only trust-boundary audit for missing validation, injection, XSS, and forged requests across forms, APIs, and webhooks. Use when "validate my inputs", "is my app injection-safe?", "check my forms", or "can someone forge requests?".

Independent GitHub snapshot · Automated classification · Original documentation governs