The Agent Skills Directory

[SAFE]: The skill provides instructional code snippets for implementing authentication and authorization. It correctly demonstrates secure patterns, such as using PKCE (Proof Key for Code Exchange) to prevent authorization code injection and using httpOnly cookies to mitigate XSS risks.
[SAFE]: No hardcoded credentials or sensitive data were found. The examples use environment variables for secrets like API keys and private keys, which is a standard security practice.
[SAFE]: Dependencies mentioned (e.g., jose, bcrypt, jsonwebtoken, next-auth) are well-known, industry-standard libraries for handling cryptography and authentication.
[SAFE]: Network requests in the examples are directed to placeholders or well-known services (e.g., Google OAuth), posing no exfiltration risk.

oauth-auth