The Agent Skills Directory

[SAFE]: The skill integrates multiple security best practices by default, including Helmet for securing HTTP headers, rate limiting to mitigate denial-of-service attempts, and secure logging configurations that prevent the accidental exposure of sensitive information like cookies or authorization tokens.
[COMMAND_EXECUTION]: The skill uses standard package management commands (npm install) and execution scripts (npm run dev) to initialize and verify the development environment. These commands target official registries and are appropriate for the skill's purpose.
[DYNAMIC_EXECUTION]: As part of the verification process, the skill executes the generated project code to confirm the API starts correctly. This represents standard verification of code generated from fixed templates.
[INDIRECT_PROMPT_INJECTION]: The skill generates applications with API ingestion points, which could potentially be targeted by indirect injections. The skill mitigates this by enforcing strict Zod validation for all request inputs and applying Mongoose query sanitization.

nodejs-scaffolding