The Agent Skills Directory

[SAFE]: The skill serves as a comprehensive security documentation and checklist for Elixir/Phoenix developers. It provides clear 'Good' vs 'Bad' code examples to prevent standard web vulnerabilities including SQL Injection, Cross-Site Scripting (XSS), Insecure Direct Object References (IDOR), and timing attacks.
[COMMAND_EXECUTION]: The skill recommends the use of standard Elixir security tools such as mix deps.audit, mix hex.audit, and sobelow. These are official or industry-standard static analysis tools used for security auditing in the Elixir ecosystem and are used here according to best practices.
[CREDENTIALS_SAFE]: The skill explicitly advises against hardcoding secrets, passwords, or tokens in logs or source code. It recommends standard secure practices such as using environment variables and System.fetch_env!/1 for secret management.

security-essentials