The Agent Skills Directory

[SAFE]: The skill provides extensive documentation and code examples for securing Next.js App Router applications. It covers critical areas such as Content Security Policy (CSP) implementation, secure session management, and cross-site scripting (XSS) prevention using DOMPurify.\n- [SAFE]: Demonstrates best practices for data integrity by using Zod for schema validation across API routes and Server Actions, reducing the risk of injection attacks.\n- [SAFE]: Includes specific implementation guides for the 'server-only' package and the React Taint API to prevent accidental leakage of sensitive server-side data to the client.\n- [EXTERNAL_DOWNLOADS]: References official and well-known security tools in CI/CD workflows, such as Snyk, CodeQL, and TruffleHog. These are presented as part of a standard security auditing process.\n- [COMMAND_EXECUTION]: Provides example CLI commands for auditing dependencies and scanning for secrets. These are standard utility commands for developers and do not represent a security risk.

security-hardening