The Agent Skills Directory

[Secure Credential Management]: The skill demonstrates secure handling of auto-generated tokens and passwords by using secrets.token_urlsafe and strictly setting file permissions to owner-only access (mode 0600). This prevents local users from accessing sensitive configuration files.
[Validation Practices]: The pattern emphasizes using socket-level client IP addresses for localhost bypasses. This is a security consideration that protects against header-spoofing attacks where a remote client might attempt to forge their identity using headers like X-Forwarded-For.
[Timing Attack Prevention]: The template code correctly utilizes hmac.compare_digest for secret comparisons. This is a recommended practice to mitigate side-channel timing attacks that could allow an attacker to guess secrets byte-by-byte.
[TLS Configuration]: The skill provides a logic flow for TLS certificates, preferring established services or tools like Tailscale or mkcert before falling back to self-signed certificates generated via the well-known cryptography library. It also correctly highlights the need for Subject Alternative Name (SAN) entries in modern certificate generation.

auth-tls-patterns