The Agent Skills Directory

[SAFE]: The documentation provides explicit security guidance for mitigating SSRF (Server-Side Request Forgery) vulnerabilities by recommending the privateIp option be set to false when processing URLs from untrusted sources like users or webhooks.
[SAFE]: The skill includes instructions to avoid logging HTTP request and response bodies in production environments, preventing accidental exposure of sensitive data like authentication tokens or session identifiers.
[SAFE]: All code examples for handling authorization headers and proxy settings use variable placeholders (e.g., $token, proxyPassword), adhering to secure coding standards for documentation.
[SAFE]: The rules define clear invariants for connection and stream timeouts, as well as recommendations for streaming large files directly to disk to prevent memory exhaustion and denial-of-service conditions.

bitrix-http-client