The Agent Skills Directory

[SAFE]: The skill provides secure code examples for webhook signature verification using HMAC-SHA256 and timing-safe equality comparisons to prevent timing attacks.
[SAFE]: It implements robust input validation using the Zod library with regex patterns to ensure shipment query data integrity.
[SAFE]: The instructions promote secure credential management, explicitly advising against hardcoding secrets and recommending secrets managers and environment variables.
[SAFE]: It includes a data protection utility to redact sensitive fields such as customs values and tax IDs from diagnostic logs.
[SAFE]: Documentation links point to well-known and official sources including Flexport's API documentation and the OWASP API Security project.

flexport-security-basics