The Agent Skills Directory

[SAFE]: The skill instructs users to manage sensitive credentials like JWT_SECRET through environment variables (process.env), which follows security best practices for secret management.
[SAFE]: All input ingestion points in the provided examples are protected by strict schema validation using the joi library, effectively mitigating common injection attacks and adhering to the principle of least privilege for data ingestion.
[SAFE]: The skill includes explicit security guidelines warning against insecure CORS configurations, such as combining wildcard origins with credentials, and strongly recommends against disabling security checks in production environments.
[SAFE]: External dependencies are standard, well-known Node.js packages from the @hapi ecosystem and the joi validation library, all installed via official registries without any suspicious or unverified sources.

hapi