The Agent Skills Directory

[SAFE]: The skill serves as a comprehensive educational guide for code reviews, dependency auditing, and configuration security. It provides reference implementations for authentication, authorization, and input validation following industry standards.
[EXTERNAL_DOWNLOADS]: Includes a reference to the 'Have I Been Pwned' API (https://api.pwnedpasswords.com/range/) for checking password breaches, which is a well-known and trusted security service.
[COMMAND_EXECUTION]: The documentation describes the use of standard security tools such as npm audit, pip-audit, gitleaks, trufflehog, and snyk. These are documented for the user's benefit and are not executed maliciously by the skill itself.
[CREDENTIALS_SAFE]: Instructions correctly emphasize secret management best practices, such as using environment variables, .gitignore for .env files, and dedicated secret managers (AWS Secrets Manager, HashiCorp Vault).

security-audit