The Agent Skills Directory

[SAFE]: The skill provides legitimate security instructions for implementing Content Security Policy (CSP), a core security feature for web applications. The guidance aligns with industry best practices for mitigating Cross-Site Scripting (XSS) attacks.
[COMMAND_EXECUTION]: The templates include standard command-line instructions using curl and openssl for calculating Subresource Integrity (SRI) hashes and verifying HTTP headers. These patterns are for developer utility and do not involve executing remote scripts or piping output to a shell.
[INDIRECT_PROMPT_INJECTION]: The skill defines a structured orchestration workflow involving specialized agents (e.g., fuse-ai-pilot:explore-codebase, fuse-ai-pilot:research-expert) and a validation agent (fuse-ai-pilot:sniper). This workflow facilitates the analysis of project context while maintaining oversight, reducing the risk of unintended behavior when processing project files.
[EXTERNAL_DOWNLOADS]: The skill references and provides templates for integrating well-known services such as Google Analytics, Google Fonts, and deployment platforms like Vercel and Netlify. These references use official domains and standard integration patterns.

astro-security