The Agent Skills Directory

[SAFE]: The skill documents the official Google authentication libraries (google-auth-library, google-auth) and their proper usage patterns.
[SAFE]: The documentation includes robust security best practices, such as log sanitization to prevent credential exposure, failing closed on missing secrets, and enforcing HTTPS.
[SAFE]: It provides detailed implementations for CSRF protection and server-side nonce verification to prevent cross-site request forgery and token replay attacks.
[SAFE]: While the skill mentions the executable-command feature for Workload Identity Federation, it includes explicit security warnings to restrict access to these executables and make configuration files read-only to prevent unauthorized modification.
[SAFE]: All external references target official Google Cloud documentation and well-known, trusted domains like googleapis.com and google.com.

google-auth