The Agent Skills Directory

[SAFE]: The skill documents and enforces the use of Zod for input validation at the controller level, which is a key defense against injection attacks and malformed data.
[SAFE]: The skill promotes secure configuration management by instructing developers to use a centralized configuration system and explicitly warns against committing sensitive files like .env, config.ini, and private keys (*.pem, *.key) to version control.
[SAFE]: The guidelines for Sentry integration include specific security and privacy measures, such as using beforeSend to mask email addresses and remove sensitive HTTP headers like Authorization and Cookie from error reports.
[SAFE]: The architecture promotes a clear separation of concerns (layered architecture), reducing the risk of accidental data exposure or complex, hard-to-audit business logic in route handlers.

backend-dev-guidelines