The Agent Skills Directory

[SAFE]: The skill uses protocol = URLProtocol.HTTPS in the defaultRequest configuration, ensuring encrypted transport for all network calls to api.example.com.
[SAFE]: The Logging plugin is correctly configured to use sanitizeHeader { it == HttpHeaders.Authorization }, which prevents sensitive authentication tokens from being leaked into system logs during debugging.
[SAFE]: The skill implements standard bearer token authentication using ktor-client-auth. It correctly utilizes loadTokens and refreshTokens patterns, including the use of markAsRefreshTokenRequest() to prevent infinite recursion during token refresh failures.
[SAFE]: Dependencies are pulled from standard, well-known repositories (io.ktor and org.jetbrains.kotlinx) with explicit versioning, reducing the risk of supply chain attacks.
[SAFE]: The skill includes a clear warning that TLS/certificate pinning is a separate concern that must be applied per platform engine, referencing standard security hardening techniques.

kmp-networking