The Agent Skills Directory

[SAFE]: The skill documentation and examples demonstrate high-quality, security-conscious API development patterns.
[INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface for processing untrusted data via API endpoints, but provides proper remediation through built-in framework features.
Ingestion points: Untrusted data enters the context via request.body, request.query, and request.params as seen in examples/core.md and examples/schemas.md.
Boundary markers: The skill mandates the use of JSON Schema validation via TypeBox to define strict input/output boundaries.
Capability inventory: The examples demonstrate database interactions (db.query), logging, and metrics operations.
Sanitization: Input sanitization and type coercion are handled automatically by Fastify's compiled schema validators.
[SAFE]: Database interaction examples in examples/plugins.md utilize parameterized queries ($1, $2), which is the standard defense against SQL injection.
[SAFE]: The skill includes instructions to define response schemas, which prevents accidental data exposure by filtering out sensitive properties (e.g., password hashes) before serialization.
[SAFE]: Error handling patterns in examples/core.md prevent internal stack traces and sensitive system information from being exposed to clients in production.
[SAFE]: No obfuscated code, remote scripts, persistence mechanisms, or unauthorized privilege escalation patterns were identified in the analyzed files.

api-framework-fastify