The Agent Skills Directory

[PROMPT_INJECTION] (SAFE): No attempts to override agent behavior or bypass safety protocols were detected. The instructions are purely technical and focused on server hardening.
[DATA_EXFILTRATION] (SAFE): No hardcoded credentials, sensitive file path access, or unauthorized network operations were identified. The included testing script uses the requests library for its intended purpose of verifying HTTP headers.
[EXTERNAL_DOWNLOADS] (SAFE): The skill references standard, industry-recognized security libraries such as helmet (Node.js) and flask-talisman (Python). No suspicious third-party downloads are performed.
[REMOTE_CODE_EXECUTION] (SAFE): No patterns of remote script execution or dangerous dynamic code evaluation were found.
[INDIRECT_PROMPT_INJECTION] (SAFE): While the skill includes a CSP reporting endpoint and a header testing script that process external data, these are standard security implementations. The logging of CSP violations and the fetching of headers from user-provided URLs are consistent with the skill's primary purpose of security auditing and hardening.

security-headers-configuration