The Agent Skills Directory

[SAFE]: The skill provides educational content and code snippets for building secure Express.js applications. All code examples follow industry best practices for security hardening, such as using Helmet for security headers, implementing rate limiting, and sanitizing user input.
[CREDENTIALS_UNSAFE]: No hardcoded credentials or sensitive tokens were found. The skill correctly demonstrates the use of environment variables (e.g., process.env.JWT_SECRET) and provides a .env.example file for configuration.
[COMMAND_EXECUTION]: The skill mentions common development and deployment commands (npm, PM2, Docker, kubectl). These are documented in the context of standard DevOps workflows and pose no risk to the execution environment.
[INDIRECT_PROMPT_INJECTION]: The skill addresses the processing of untrusted data (e.g., REST API request bodies) but emphasizes the implementation of strict validation and sanitization using libraries like express-validator and xss-clean to mitigate injection risks.
[EXTERNAL_DOWNLOADS]: The skill references standard, well-known Node.js packages from the official NPM registry and provides documentation links to established services (New Relic, Datadog, Prometheus).

express-production