The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for initializing projects using official tools like npm create solid@latest and npx degit solidjs/templates/ts. These refer to well-known, community-maintained templates and generators.
[REMOTE_CODE_EXECUTION]: Examples for OAuth integration utilize official, trusted endpoints from Google and GitHub for authentication flows.
[CREDENTIALS_UNSAFE]: Code examples for authentication (JWT, Session, OAuth) use descriptive placeholders such as SESSION_SECRET and JWT_SECRET rather than hardcoded credentials. It explicitly recommends validating environment variables and using tagged templates for raw SQL queries to prevent injection.
[DATA_EXFILTRATION]: No patterns of unauthorized data collection or exfiltration were found. The skill documentation focuses on legitimate web application logic and standard API interactions.
[SAFE]: The skill includes an extensive security reference file (references/security.md) that correctly advises on mitigating common vulnerabilities including XSS (using dompurify), CSRF, SQL Injection, and insecure input handling (using zod).

solidjs-solidstart-expert