The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for installing official Descope SDKs from standard registries (NPM and PyPI). Evidence: Framework-specific references include installation commands for @descope/nextjs-sdk, @descope/react-sdk, @descope/node-sdk, and the descope Python package.
[CREDENTIALS_UNSAFE]: The documentation includes clear guidance and guardrails for secret management. Evidence: The instructions use environment variables (e.g., NEXT_PUBLIC_DESCOPE_PROJECT_ID) and provide a specific warning against exposing the DESCOPE_MANAGEMENT_KEY in client-side code.
[INDIRECT_PROMPT_INJECTION]: The skill includes a framework detection mechanism that uses project metadata. Evidence: The agent is instructed to check package.json to determine the appropriate integration reference (Next.js, React, or Backend). This is a safe use of local project information to provide relevant documentation.

descope-auth