The Agent Skills Directory

[SAFE]: The skill provides comprehensive and secure development patterns for Go Gin APIs, with a strong focus on defensive programming.
[SAFE]: Implements server-level security configurations, such as ReadHeaderTimeout to prevent Slowloris denial-of-service attacks (CWE-400).
[SAFE]: Provides explicit guidance on preventing directory traversal vulnerabilities by using filepath.Base to sanitize user-provided filenames during uploads.
[SAFE]: Includes detailed instructions and helper functions for safe context extraction, preventing common runtime panics associated with type assertions in Gin handlers.
[SAFE]: Advocates for a "fail-closed" security model in permission and configuration parsing, ensuring that any parsing error results in access being denied.
[SAFE]: Recommends and demonstrates input sanitization techniques, including HTML escaping and string trimming, to neutralize potential cross-site scripting (XSS) or other injection payloads.
[SAFE]: Details secure WebSocket implementations, including origin checks to mitigate Cross-Site WebSocket Hijacking (CSWSH) and message size limits to prevent memory exhaustion.
[INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling external data through HTTP endpoints and file uploads, which creates a surface for indirect prompt injection if an agent later processes this untrusted content.
Ingestion points: Handlers binding JSON, query, URI, and multipart form data in references/server-handlers-and-errors.md and references/routing-groups-and-versioning.md.
Boundary markers: The skill does not define LLM-specific boundary markers, but it enforces strict separation between delivery DTOs and domain models.
Capability inventory: The provided code patterns include file system access (references/file-uploads-local.md), database interactions, and background job processing (references/background-jobs-queue-and-shutdown.md).
Sanitization: The skill provides robust sanitization instructions including the use of the validator/v10 engine, html.EscapeString, and filepath.Base to sanitize input before it is processed by services.

golang-gin-api