The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends installing official SDKs from the vendor's official repositories and registries:
Node.js: @scalekit-sdk/node from npm
Python: scalekit-sdk-python from PyPI
Go: github.com/scalekit-inc/scalekit-sdk-go from GitHub
Java: com.scalekit:scalekit-sdk-java from Maven Central
[SAFE]: All external URLs point to legitimate vendor-controlled domains (app.scalekit.com, docs.scalekit.com) or well-known public repositories associated with the vendor (scalekit-inc).
[SAFE]: The skill actively promotes secure coding practices by providing checklists and instructions for:
Enforcing HTTPS on endpoints
Validating ID and Access tokens before trusting user claims
Implementing secure session management with httpOnly, secure, and sameSite cookie flags
Protecting against CSRF and SAML replay attacks in IdP-initiated flows
[SAFE]: An out-of-place link to a Reddit discussion about AI agent skill generation was identified in the documentation text. This appears to be a benign artifact or attribution from the skill's creation process and does not pose a security threat to the execution environment.

modular-sso