The Agent Skills Directory

[SAFE]: The skill incorporates comprehensive security defaults, instructing the agent to configure helmet, cors with explicit allowlists, rate limiting, and mandatory input validation using zod or joi on all endpoints.
[SAFE]: It emphasizes secure data handling practices, including instructions for password hashing using bcrypt or argon2 and strict requirements for secret redaction in structured logs.
[SAFE]: The skill promotes modern Node.js best practices by recommending built-in features (such as --watch, --env-file, and the native test runner) over external packages like nodemon or dotenv, which reduces the potential supply chain attack surface.
[SAFE]: No malicious code patterns, obfuscation, unauthorized network operations, or sensitive data exfiltration attempts were detected in any of the skill's files.

express-backend-starter