The Agent Skills Directory

[SAFE]: The authentication and authorization patterns provided in 'references/auth.md' follow secure practices, specifically advocating for the use of external configuration for sensitive metadata (Authority/Audience) and resource-based authorization handlers to ensure granular access control.\n- [SAFE]: The error handling guidelines in 'references/error-handling.md' emphasize the use of RFC 9457 ProblemDetails and explicitly instruct the developer to never leak internal exception details to production responses, which prevents information disclosure vulnerabilities.\n- [SAFE]: The middleware pipeline configuration described in 'references/middleware.md' demonstrates a correct and secure execution order, ensuring that exception handling and transport security (HSTS/HTTPS) wrap all other components and that CORS preflight requests are handled before authentication challenges.\n- [SAFE]: Data validation practices in 'references/model-binding-validation.md' encourage robust input integrity checks through both declarative Data Annotations and FluentValidation, reducing the risk of processing malformed or malicious data.\n- [SAFE]: The testing patterns in 'references/testing.md' utilize standard, reputable frameworks like WebApplicationFactory and provide safe methods for overriding services in testing environments without compromising production code integrity.

dotnet-aspnet