The Agent Skills Directory

[CREDENTIALS_UNSAFE]: Multiple code examples provided with the skill contain hardcoded sensitive information or placeholders that simulate secrets.
examples/config/consul/boot/boot.go: Contains a hardcoded Consul ACL token 3f8aeba2-f1f7-42d0-b912-fcb041d4546d for authentication.
examples/database/encoded-pass/dbdriver/dbdriver.go: Uses a hardcoded encryption key key for encoding for AES decryption of database passwords.
examples/httpserver/jwt/internal/middleware/jwt.go: Uses a hardcoded placeholder secret your-secret-key-here for signing and validating JWT tokens.
examples/httpserver/swagger-auth/main.go and examples/httpserver/basic-auth/main.go: Contain hardcoded credentials for administration/access (admin:123456 and user:pass).
[DATA_EXPOSURE]: The skill provides examples that reference or access sensitive configuration files on the local file system.
examples/config/kubecm/boot_out_pod/boot.go: Hardcodes a path to a Kubernetes configuration file /Users/john/.kube/config. This file typically contains cluster certificates and authentication tokens, and the path includes a specific user identifier.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of network-facing HTTP and AI-integrated servers that process untrusted external data, creating an attack surface for indirect injection.
examples/httpserver/upload-file/main.go: Implements a file upload handler that accepts multipart form data (File and Msg fields) and can save them to the filesystem.
examples/httpserver/mcp-http/main.go and examples/httpserver/mcp-sse/main.go: Implements Model Context Protocol (MCP) servers that process external JSON-RPC messages and interact with AI models.
Mandatory Evidence Chain:
Ingestion points: UploadReq struct in upload-file/main.go and CallToolRequest in MCP examples.
Boundary markers: Absent in the provided example code.
Capability inventory: Includes file system writing (req.File.Save), network server execution, and AI tool registration.
Sanitization: Not explicitly implemented in the demonstration snippets.

goframe-v2