The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill explicitly warns against hardcoding API tokens and provides clear instructions on using environment variables (process.env.REPLICATE_API_TOKEN) for authentication.
[EXTERNAL_DOWNLOADS]: The documentation references the official replicate npm package, which is the standard SDK for the service described.
[COMMAND_EXECUTION]: Instructions include standard package management commands (npm install replicate) for setting up the development environment.
[INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risks of processing external data and provides specific patterns for secure webhook validation using validateWebhook() to prevent payload spoofing.
[DATA_EXFILTRATION]: All network patterns target the official Replicate API (api.replicate.com) for legitimate model inference and management tasks.

ai-infrastructure-replicate