The Agent Skills Directory

[SAFE]: The skill serves as a technical reference for SvelteKit development, covering routing, data loading, and server-side actions.
[INDIRECT_PROMPT_INJECTION]: The skill provides examples of handling user-controlled data via API routes and form actions. It acknowledges potential security risks associated with these patterns and provides necessary warnings:
Recommends validating and authorizing mutations before database writes.
Warns that data: body in database calls is not a production-safe pattern due to mass-assignment risks.
Advises using httpOnly and secure flags for auth cookies.
Explicitly mentions that route groups are not a substitute for proper authorization.
[EXTERNAL_DOWNLOADS]: Includes standard initialization commands using npm create svelte@latest, which fetches the official framework starter from the well-known NPM registry.

sveltekit