The Agent Skills Directory

[SAFE]: The skill is a defensive collection of security best practices and does not contain executable code, command execution, or network exfiltration patterns.
[SAFE]: The instructions correctly advise against common security pitfalls, such as hardcoding credentials, using weak cryptographic algorithms, and performing unsafe deserialization.
[SAFE]: Guidance for preventing injection attacks (SQL, Command, XSS) and SSRF aligns with industry standard remediation techniques like parameterized queries and strict URL allow-listing.
[SAFE]: The skill promotes the use of well-known security tools and package managers (e.g., npm audit, snyk, pip-audit) for vulnerability management.

security-owasp