The Agent Skills Directory

[SAFE]: The skill provides defensive hardening guidance and established security best practices for web development.- [COMMAND_EXECUTION]: Mentions the use of standard auditing and detection tools such as npm audit, npm ci, and git diff for identifying vulnerabilities and staged secrets.- [PROMPT_INJECTION]: Includes instructions for developers on how to identify and mitigate prompt injection risks and improper output handling when implementing AI-powered features.- [DATA_EXFILTRATION]: Correctly identifies sensitive files such as .env, .pem, and .key for exclusion from version control to prevent credential exposure.- [REMOTE_CODE_EXECUTION]: Discusses supply-chain hygiene and the risks associated with postinstall scripts and typosquatted packages as part of a general security overview.

security-and-hardening