The Agent Skills Directory

[SAFE]: The skill follows established security best practices for Node.js development. It includes instructions for using helmet for HTTP header security and cors for cross-origin resource sharing management.
[SAFE]: Input validation is consistently applied across routes using Zod middleware, which mitigates injection risks and ensures data integrity.
[SAFE]: Database interactions are performed using Drizzle ORM, which provides type-safe queries and protects against SQL injection by design.
[SAFE]: Authentication is handled via the Supabase Auth client, following the standard pattern of verifying JWTs in middleware before granting access to protected routes.
[SAFE]: The skill includes an 'Anti-Patterns' section that explicitly warns against dangerous practices such as hardcoding secrets or exposing service keys in responses.

supabase-node