The Agent Skills Directory

[SAFE]: The skill provides documentation and templates for secure API development without including malicious code or hidden behaviors. Key security practices documented include:\n
Multi-Tenant Isolation: The skill promotes a repository pattern that automatically filters database queries by tenant ID, preventing cross-tenant data leaks. Evidence is found in templates/repository-pattern.py and examples/fastapi-crud.md.\n
Data Validation and Exposure Control: It utilizes separate Pydantic and Zod schemas for input and output, ensuring sensitive fields like password hashes are never exposed to the client. Examples are in examples/pydantic-schemas.md and templates/pydantic-schemas.py.\n
Secure Configuration: It correctly advises against hardcoding secrets, recommending the use of environment variables and Doppler for managing sensitive keys like JWT_SECRET_KEY and REDIS_URL as seen in reference/fastapi-setup.md and reference/authentication.md.\n
Access Controls and Abuse Prevention: It provides templates for implementing JWT authentication and rate limiting using Upstash Redis to protect endpoints from unauthorized access and brute-force attacks (templates/rate-limiter.py).\n
Security Auditing: A dedicated checklists/security-review.md is provided to help developers identify common OWASP risks and ensure secure design before production deployment.

api-design-standards