The Agent Skills Directory

[SAFE]: The skill exclusively promotes security best practices for API development, providing correct implementation patterns for authentication, authorization, and input validation.
[DATA_EXPOSURE_AND_EXFILTRATION]: The code examples correctly demonstrate using environment variables (e.g., process.env.JWT_SECRET) for sensitive secrets rather than hardcoding them, following industry security standards.
[EXTERNAL_DOWNLOADS]: The skill references well-known, reputable security resources and standard industry libraries such as Helmet, Zod, and Bcrypt. No suspicious or unknown sources are used.
[INDIRECT_PROMPT_INJECTION]: The skill provides defensive coding patterns (using Zod for schema validation and parameterized queries) specifically designed to mitigate injection vulnerabilities in application code.

api-security-best-practices