The Agent Skills Directory

[SAFE]: The skill provides educational content and actionable workflows for improving application security based on the OWASP Top 10 (2021) framework. It includes specific code examples for both vulnerable and secure implementations in Python and JavaScript/TypeScript.\n- [SAFE]: Recommends the use of standard, reputable open-source security tools such as Semgrep, Bandit, TruffleHog, Trivy, and pip-audit. These are well-known tools used for static analysis, dependency scanning, and secret detection.\n- [SAFE]: Implements a structured workflow for agents to perform automated security scans, parse JSON results, and record quality evidence within the agent's context object. This facilitates automated security gatekeeping (e.g., blocking deployments based on critical vulnerability thresholds).\n- [SAFE]: Provides clear guidance on defensive programming practices, including input validation, output encoding, secure session management, and proper secret handling using environment variables.

security-checklist