The Agent Skills Directory

[SAFE]: The skill provides instructional content and code templates for building API routes. It correctly identifies and explains security patterns like keeping secrets (API keys, database credentials) on the server side and proxying external APIs to protect sensitive information.
[EXTERNAL_DOWNLOADS]: The guide references standard developer tooling including eas-cli for deployment to Expo Application Services (EAS) and the @libsql/client/web package for connecting to Turso databases. These are well-known services and libraries within the mobile development ecosystem.
[INDIRECT_PROMPT_INJECTION]: The skill documents patterns for ingesting external data, which is a standard surface for API development.
Ingestion points: API route handlers demonstrated in SKILL.md (e.g., app/api/hello+api.ts) ingest data via request.json() and query parameters using URL.searchParams.
Boundary markers: The skill includes a dedicated "Rules" section that explicitly instructs the developer to "ALWAYS validate and sanitize user input."
Capability inventory: The code examples include network operations via the Web fetch API and database execution using the LibSQL client.
Sanitization: In addition to the specific rules for validation, the error handling examples demonstrate using try/catch blocks to manage runtime exceptions during data processing.

expo-api-routes