The Agent Skills Directory

[SAFE]: The skill contains educational content and code snippets for building Node.js backend services. The provided examples follow industry-standard security practices, including the use of helmet for securing HTTP headers and cors for managing cross-origin requests.
[SAFE]: External references are restricted to official documentation from Express.js and generic placeholders in code examples.
[INDIRECT_PROMPT_INJECTION]: The skill provides templates for handling external data through web API endpoints, which represents a standard data ingestion surface.
Ingestion points: Request parameters (req.params) and body data (req.body) within the Express route handler examples in SKILL.md.
Boundary markers: No explicit delimiters for untrusted data are provided within the templates.
Capability inventory: The code examples focus on HTTP response generation and logging; there are no instances of command execution, file system modification, or network exfiltration.
Sanitization: The instructions recommend utilizing helmet() for basic security header management and setting payload limits in express.json() to mitigate Denial of Service (DoS) risks.

express