The Agent Skills Directory

[SAFE]: The skill is entirely instructional, providing guidance on framework configuration and usage. No suspicious or malicious code was found in the documentation or referenced files.
[DATA_EXFILTRATION]: The skill explicitly documents a security feature that protects against IP spoofing. It explains how the framework deletes and rewrites incoming client-IP headers (like x-forwarded-for) using the server-verified IP from Fastify.
[CREDENTIALS_UNSAFE]: The skill follows security best practices by advising the use of environment variables (process.env.GOOGLE_CLIENT_ID, etc.) for storing sensitive credentials rather than hardcoding them in configuration files.
[COMMAND_EXECUTION]: The provided command examples, such as pnpm sonamu auth generate and pnpm sonamu migrate, are standard administrative tasks for project initialization and database management within the Sonamu ecosystem.

sonamu-auth