The Agent Skills Directory

[SAFE]: The skill serves as an instructional guide for Quarkus security and does not contain any malicious code, obfuscation, or injection patterns.
[COMMAND_EXECUTION]: Provides instructions for running standard security tools like mvn org.owasp:dependency-check-maven:check and gradle dependencyCheckAnalyze, which are industry-standard practices for scanning vulnerabilities.
[CREDENTIALS_UNSAFE]: The skill follows security best practices by explicitly instructing users to avoid hardcoding secrets in configuration files, recommending environment variables (e.g., ${DB_PASSWORD}) and HashiCorp Vault instead.
[SQL_INJECTION]: Demonstrates secure database access patterns using Panache's parameterized queries and warning against unsafe string concatenation in native SQL queries.
[XSS_PROTECTION]: Includes guidance on configuring security headers, such as Content Security Policy (CSP), and provides specific warnings against using unsafe-inline scripts.

quarkus-security