The Agent Skills Directory

[SAFE]: The skill incorporates extensive security documentation and guidance, including mandatory security awareness prompts for unauthenticated network services and the implementation of Row Level Security (RLS) in PostgreSQL.
[SAFE]: The Python utility scripts/er_diagram.py uses yaml.safe_load() for parsing user-supplied configuration files, which effectively prevents arbitrary code execution during the deserialization of YAML data.
[SAFE]: The GitHub Actions template (templates/ci.yml) follows security hardening best practices by explicitly setting the permissions scope to contents: read, adhering to the principle of least privilege.
[SAFE]: External technical references and download links target official and well-known technology documentation and repositories (e.g., Supabase, FastAPI, Prisma, and Docker), which are treated as trusted sources for development configuration.
[SAFE]: Docker guidelines provided in the references emphasize security-focused patterns such as multi-stage builds, non-root user execution, and pinning base images by digest to prevent supply chain attacks.

light-system-design