The Agent Skills Directory

[SAFE]: No security issues detected. The skill contains educational content and implementation examples for backend development.
[CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were found. The skill correctly demonstrates the best practice of using environment variables for sensitive data such as JWT keys, database URLs, and session secrets.
[PROMPT_INJECTION]: No instructions to override agent behavior, bypass safety filters, or reveal system prompts were detected.
[OBFUSCATION]: No obfuscated code, hidden characters, or homoglyph attacks were found. Base64 strings present in the documentation are standard JSON Web Token (JWT) examples used for illustrative purposes.
[EXTERNAL_DOWNLOADS]: External references point to trusted industry documentation (OWASP, OAuth.net, OpenTelemetry) and official GitHub Actions from well-known providers (actions, snyk, codecov). These resources are consistent with the skill's primary purpose and do not represent a security risk.
[DYNAMIC_EXECUTION]: No unsafe dynamic code execution patterns (e.g., eval(), exec(), or runtime script generation) were found in the provided snippets.
[DATA_EXFILTRATION]: No patterns involving the unauthorized extraction of sensitive local data or credentials to external domains were identified.
[PRIVILEGE_ESCALATION]: No commands attempting to escalate privileges or bypass system security controls (e.g., sudo, chmod 777) were detected.

backend-development