The Agent Skills Directory

[SAFE]: The skill provides high-quality guidance on using System.Security.Cryptography correctly, focusing on modern .NET 8 conventions while identifying legacy footguns in .NET Framework 4.8.
[SAFE]: It emphasizes critical security principles such as using RandomNumberGenerator for entropy, employing FixedTimeEquals for secret comparisons to prevent timing attacks, and avoiding hardcoded secrets by defining a clear storage boundary.
[SAFE]: The instructions for symmetric and asymmetric cryptography follow industry standards, such as recommending AES-GCM (authenticated encryption) over vulnerable modes like ECB/CBC and specifying RSA-OAEP to mitigate padding-oracle attacks.
[SAFE]: It explicitly lists and discourages the use of broken or weak algorithms like MD5, SHA-1, and BinaryFormatter, providing secure modern alternatives for each use case.

dotnet-cryptography