The Agent Skills Directory

[SAFE]: The skill consists primarily of educational markdown files covering REST, GraphQL, tRPC, authentication, and security testing principles.
[SAFE]: The provided script scripts/api_validator.py is a static analysis tool that scans a user-provided project directory for API-related files (e.g., OpenAPI specs, route controllers) and checks for the presence of best practices like error handling, status codes, and input validation using regular expressions. It does not execute the code it analyzes and performs no network operations.
[SAFE]: Documentation in security-testing.md correctly identifies the OWASP API Security Top 10 and provides legitimate guidance on testing for vulnerabilities like BOLA and Broken Authentication without encouraging malicious behavior.
[SAFE]: The frontmatter configuration for allowed-tools (Read, Write, Edit, Glob, Grep) is appropriate for the skill's stated purpose of analyzing and documenting API designs.

api-patterns