The Agent Skills Directory

[SAFE]: The skill is purely educational, providing information on OWASP Broken Access Control (A05) vulnerabilities. It includes vulnerable code examples labeled clearly as such and provides robust secure implementation patterns using middleware, RBAC/ABAC (using @casl/ability), and proper input filtering to prevent mass assignment.
[SAFE]: The skill uses standard, well-known libraries such as uuid, mongoose, and @casl/ability in its examples. No suspicious remote code execution or data exfiltration patterns were detected.
[SAFE]: The code snippets provided serve as a reference for developers to implement security best practices and do not perform any hidden or malicious operations. The shell commands in the testing section are standard diagnostic curl commands intended for security testing of one's own applications.

access-control-audit