The Agent Skills Directory

[SAFE]: The skill provides standard, well-documented instructions for implementing OAuth2 and OIDC flows. It includes explicit security guardrails such as mandatory server-side token validation, CSRF protection via a cryptographically random state parameter, and the use of HttpOnly/Secure cookie attributes to protect sensitive tokens from client-side access.
[EXTERNAL_DOWNLOADS]: The skill references official SDKs and standard industry libraries (e.g., @scalekit-sdk/node, scalekit-sdk-go, Spring Boot OAuth2 starters) from public registries. All external URLs point to official documentation, the vendor's dashboard, or public GitHub repositories belonging to the vendor (scalekit-inc), which are legitimate resources for the skill's purpose.
[INDIRECT_PROMPT_INJECTION]: The authentication flow processes external data from OAuth callbacks (such as the authorization code and state parameter). The skill includes necessary validation logic, such as verifying the state parameter against a stored cookie, to prevent injection attacks and CSRF. The capabilities are limited to standard authentication operations within the vendor's ecosystem.

implement-saaskit