The Agent Skills Directory

[SAFE]: The skill includes a static analysis script (audit-auth-contract.mjs) designed to audit local project directories for compliance with authentication security standards. The script performs read-only operations to detect patterns like raw fetch usage, token-mode switches, and missing proxy headers.
[SAFE]: The documentation explicitly enforces security best practices, such as prohibiting the hardcoding of credentials, warning against trusting client-supplied X-Forwarded-Host headers, and ensuring that sensitive browser cookies like zs_session are not accessed or modified by application code.
[SAFE]: All external references, including the @qfeius/make-app-auth package and related endpoints, are vendor-specific resources originating from the skill author ('qfeius') or well-known public registries.
[SAFE]: The test suite (test-audit-auth-contract.mjs) uses standard local testing patterns, such as creating temporary file fixtures to validate the auditing logic without affecting the host system's persistence or configuration.

make-app-auth