The Agent Skills Directory

[SAFE]: The skill provides defensive security patterns and implementation examples for NestJS applications without introducing malicious code or behaviors.
[SAFE]: Cryptography guidelines recommend Argon2id for password hashing, which is a modern, memory-hard algorithm resistant to common cracking techniques.
[SAFE]: JWT implementation instructions specifically advise rejecting the 'none' algorithm and validating 'iss' and 'aud' claims, which prevents common authentication bypass vulnerabilities.
[SAFE]: The skill promotes secure secrets management by explicitly advising against hardcoding credentials and suggesting the use of environment variables or dedicated secret managers like AWS Secrets Manager or HashiCorp Vault.
[SAFE]: Implementation examples use well-known, standard Node.js security libraries such as helmet, argon2, and csrf-csrf to protect against common web vulnerabilities like XSS, CSRF, and brute-force attacks.

nestjs-security