The Agent Skills Directory

[SAFE]: The skill provides comprehensive instructional content for application security, covering threat modeling (STRIDE) and mitigation strategies for OWASP Top 10 vulnerabilities.\n- [SAFE]: The automated grading script graders/check.py employs static analysis with the ast module to evaluate the security properties of user code (e.g., SQL injection prevention, password hashing) without executing the code itself.\n- [SAFE]: All referenced third-party libraries (e.g., argon2-cffi, pyjwt, slowapi) and security tools (e.g., gitleaks, pip-audit) are reputable and standard in the security industry.\n- [SAFE]: Vulnerable patterns in fixtures/vulnerable.py are clearly marked and used solely for educational purposes in a controlled training exercise.

security-best-practices