The Agent Skills Directory

[SAFE]: The skill incorporates strong security best practices for secret management. It includes mandatory instructions to create a .gitignore file that excludes sensitive files like .env, .key, and bot_token.txt from version control.\n- [SAFE]: The skill recommends using gitleaks and detect-private-key via pre-commit hooks to prevent accidental leakage of credentials into repositories.\n- [EXTERNAL_DOWNLOADS]: The skill references official and well-known repositories for security tooling, such as github.com/pre-commit/pre-commit-hooks and github.com/gitleaks/gitleaks. These are documented neutrally as part of the security setup phase.\n- [COMMAND_EXECUTION]: The shell commands provided are for standard project initialization, such as creating configuration files (.gitignore, .pre-commit-config.yaml) and installing pre-commit hooks.\n- [PROMPT_INJECTION]: The skill outlines an indirect prompt injection surface as it demonstrates building bots that process untrusted user input (message.text). However, this is an inherent aspect of the skill's purpose (bot development), and the documentation includes a checklist item for input validation to mitigate such risks.

telegram-bot