The Agent Skills Directory

[SAFE]: No security threats detected across any of the analyzed categories.
[INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing user-supplied data over WebSockets (e.g., chat messages). While this creates an attack surface in the resulting applications, the skill proactively mitigates this by providing dedicated documentation on input validation (using Joi) and XSS protection (using sanitize-html). This demonstrates a security-first approach to code generation.
[CREDENTIALS_SAFE]: Code examples correctly demonstrate using environment variables (process.env.JWT_SECRET, process.env.REDIS_URL) for secret management rather than hardcoding credentials.
[EXTERNAL_DOWNLOADS]: The skill references standard, well-known industry packages such as socket.io, redis, jsonwebtoken, and joi. All references are standard for the described purpose.

websocket-engineer