The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a diagnostic script scripts/validate-kinde-nextjs.mjs intended for local execution by the user. The script performs static analysis of the codebase, checks file structures (e.g., verifying proxy.ts vs middleware.ts), and validates environment variable presence. It uses spawnSync specifically for git check-ignore to verify secret file security. The script contains safeguards to prevent printing sensitive environment variable values to the console.
[DATA_EXPOSURE]: The skill emphasizes strictly keeping KINDE_CLIENT_SECRET in server-only environments and .env.local. It explicitly warns against using NEXT_PUBLIC_ prefixes or committing secrets to version control. The validation script checks for these misconfigurations locally but does not transmit this data externally.
[PROMPT_INJECTION]: The skill provides patterns for safe URL redirection by mapping dynamic destinations to a strict internal allowlist, preventing open redirect vulnerabilities.
[DATA_EXFILTRATION]: No network exfiltration patterns were detected. The included validation script performs all checks on the local filesystem and reports results to the local standard output.

kinde-nextjs