The Agent Skills Directory

[SAFE]: The skill is strictly instructional, providing guidelines for high-quality Node.js software engineering without including any executable scripts or hidden commands.
[SAFE]: Includes a dedicated 'Security' section that promotes secure coding practices, such as using crypto.timingSafeEqual() for secrets, avoiding eval(), and employing the Node.js Permission Model (--permission) for sandboxing.
[SAFE]: Encourages the use of native Node.js APIs over external npm packages (e.g., node:test, fetch, node:crypto), which reduces the potential attack surface related to third-party dependency vulnerabilities.
[SAFE]: Recommends production-grade security measures like running npm audit, using npm ci in CI/CD pipelines, and pinning exact dependency versions.

nodejs-expert