The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill provides templates for building web APIs that ingest external data, which is a standard attack surface for web applications.
Ingestion points: Middleware and route examples in SKILL.md process ctx.request.body and ctx.headers.authorization.
Capability inventory: The skill outlines web server functionality including routing, request handling, and middleware execution.
Sanitization: The instructions explicitly recommend using zod for schema validation and koa-helmet for security headers, which are industry-standard mitigations.
Boundary markers: The skill follows standard HTTP request/response boundary patterns.

koa-typescript