The Agent Skills Directory

[SAFE]: The skill serves as an educational resource and an auditing checklist for developers. It provides clear 'FAIL' and 'PASS' examples to discourage insecure practices like hardcoding secrets or using unparameterized SQL queries.
[SAFE]: All external libraries and tools referenced (e.g., Zod, DOMPurify, AWS SDK, GitHub Actions) are well-known, industry-standard packages or originate from trusted organizations such as AWS, Cloudflare, and Truffle Security.
[SAFE]: The instructions promote security best practices including the principle of least privilege for IAM roles, the use of OIDC for CI/CD authentication, and the implementation of Content Security Policies (CSP).

security-review