The Agent Skills Directory

[SAFE]: The skill implements robust security patterns for authentication and authorization, such as using Argon2id for password hashing, pinning JWT algorithms to prevent header-based attacks, and enforcing strict CORS origin policies instead of permissive defaults.
[SAFE]: It promotes supply chain security by integrating pip-audit into the validation pipeline and providing a quality-gate script (verify.sh) that runs linting, type checking, and security audits.
[SAFE]: The provided code templates for database interactions prioritize SQLAlchemy 2.0 async patterns which inherently use bound parameters to prevent SQL injection vulnerabilities.
[SAFE]: The project layout and application factory patterns follow the principle of least privilege and secure configuration management, specifically utilizing pydantic-settings and SecretStr to prevent sensitive credential leakage in logs or tracebacks.
[SAFE]: The Docker configuration follows industry standards by utilizing a non-root user and implementing health checks targeting local endpoints.

fastapi