The Agent Skills Directory

[SAFE]: The skill documents standard NestJS implementation patterns for authentication using Passport and JWT, following industry-standard security protocols.
[SAFE]: It promotes security-centric coding practices, such as explicitly excluding sensitive database fields (like passwords) from API responses and using bcrypt for secure password storage.
[SAFE]: Request validation is enforced using class-validator and ValidationPipe with strict whitelisting enabled, which effectively mitigates common injection and data over-posting vulnerabilities.
[SAFE]: External dependencies are restricted to established, well-known packages within the Node.js and NestJS ecosystems (e.g., Prisma, Pino, Joi).
[SAFE]: Environment variable handling includes startup-time validation using Joi schemas, ensuring the application fails fast if critical security configurations are missing or invalid.

Backend