The Agent Skills Directory

[SAFE]: No malicious patterns or security risks were detected. The skill is instructional and provides high-quality, secure code templates.
[DATA_EXFILTRATION]: The network functionality in scripts/x402_payment_tool.py includes a _validate_url function that explicitly prevents Server-Side Request Forgery (SSRF) by blocking non-HTTPS protocols and preventing connections to private, loopback, or link-local IP addresses.
[CREDENTIALS_UNSAFE]: The skill documentation and scripts follow security best practices by instructing users to store sensitive API keys and tokens in a dedicated credential provider or AWS Secrets Manager rather than hardcoding them or relying on environment variables for sensitive data.
[COMMAND_EXECUTION]: While the skill generates CLI commands for project management, these are designed for the developer to review and execute manually. Furthermore, the skill provides explicit warnings and remediation guidance regarding command injection risks when using the InvokeAgentRuntimeCommand feature.

agents-build