The Agent Skills Directory

[SAFE]: The skill emphasizes secure design principles, specifically advising developers to validate the inputs of every hub method to prevent unauthorized actions by authenticated users.
[SAFE]: It includes hardening guidelines, such as disabling detailed error messages in production to prevent leaking sensitive exception details to clients.
[SAFE]: The code snippets follow security best practices by using the configuration options pattern for connection strings instead of hardcoding sensitive values.
[SAFE]: It provides the necessary security middleware configuration to safely handle JWT authentication over query strings for WebSocket connections, which is the standard requirement for browser-based SignalR clients.
[SAFE]: The skill warns against exposing ORM entities directly in hub payloads, which is a key practice for preventing accidental data leakage and over-serialization vulnerabilities.

dotnet-realtime