The Agent Skills Directory

[SAFE]: The skill provides high-quality documentation for implementing secure coding practices. It correctly distinguishes between unsafe and safe patterns for common web vulnerabilities.
[EXTERNAL_DOWNLOADS]: Mentions standard, well-known security tools like npm audit, snyk, and npm-check-updates for dependency scanning and updates. References to external resources (OWASP, Snyk, Node.js) target official, trusted domains.
[COMMAND_EXECUTION]: Demonstrates safe command execution using child_process.execFile with argument arrays to prevent shell injection, while explicitly flagging the dangers of the exec function.
[CREDENTIALS_SAFE]: Correctly recommends the use of environment variables for secrets and session management, following industry standards for secret handling.

owasp-security