The Agent Skills Directory

[SAFE]: The skill provides secure coding guidelines for .NET cryptography, advocating for industry-standard practices like using AesGcm for authenticated encryption and SHA256 for integrity.
[SAFE]: It explicitly warns against using insecure or deprecated algorithms such as MD5, SHA-1, and BinaryFormatter, which is known for remote code execution vulnerabilities by design.
[SAFE]: The skill provides platform-specific security advice for .NET Framework 4.8, identifying insecure default settings and providing safer alternatives for key derivation and random number generation.
[SAFE]: It correctly defines the boundary of secret management, instructing the agent to never hardcode secrets and instead use externalized storage like vaults or managed key services.

dotnet-cryptography