The Agent Skills Directory

[SAFE]: The skill enforces a security-first approach by recommending and providing boilerplate for official Fastify security plugins, including @fastify/helmet for security headers, @fastify/cors for secure cross-origin resource sharing, and @fastify/rate-limit for protecting endpoints against brute-force and DoS attacks.
[SAFE]: No hardcoded credentials, sensitive file access, or data exfiltration patterns were detected. The skill correctly demonstrates the use of environment variables (e.g., process.env.JWT_SECRET) for managing sensitive configuration, which is a standard security practice.
[SAFE]: No obfuscation (Base64, zero-width characters, or homoglyphs) was found in the instructions or reference files. The documentation is clear, plain-text, and aligns with its stated purpose of assisting in Fastify development.
[SAFE]: All identified dependencies are standard, well-maintained packages from the official Fastify ecosystem or reputable projects like TypeBox and Zod. There are no attempts to execute remote scripts or unverifiable binaries.
[SAFE]: The skill incorporates robust input validation patterns using TypeBox and JSON Schema, which serves as a primary defense against indirect prompt injection and malformed data attacks at the application level.

nodejs-fastify