The Agent Skills Directory

[SAFE]: The skill implements a secure proxy pattern where API keys are stored server-side and injected into requests, preventing exposure to the client-side browser environment.
[SAFE]: The proxyRouter implementation in proxy.ts uses a strict allow-list (permittedPrefixes) to ensure the proxy only forwards requests to authorized API endpoints (Least Privilege principle).
[SAFE]: The EnvTenantStore and TenantStore interface in tenants.ts encourage the use of environment variables or dedicated secret managers for credential storage, avoiding hardcoded secrets.
[SAFE]: External URLs (docs.igrant.io, demo-api.igrant.io, staging-api.igrant.io) are official resources belonging to the skill's documented provider (iGrant.io).

igrantio-backend-proxy