The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were identified in the skill content.
[EXTERNAL_DOWNLOADS]: The skill references official SDKs and packages from Clerk and Svix, which are well-known technology providers.
Evidence: pnpm add @clerk/nextjs in SKILL.md.
Evidence: github.com/clerkinc/clerk-sdk-go/v2 in SKILL.md.
Evidence: import { Webhook } from "svix" in SKILL.md.
[INDIRECT_PROMPT_INJECTION]: The skill includes a webhook handler that processes external event data, representing a data ingestion surface. The implementation mitigates risks by requiring signature verification.
Ingestion points: src/app/api/webhooks/clerk/route.ts POST handler.
Boundary markers: Implements mandatory svix signature verification before processing payloads.
Capability inventory: Performs database CRUD operations via db.user and db.org models.
Sanitization: Signature verification ensures the payload originated from the trusted auth provider.

clerk-auth