The Agent Skills Directory

[SAFE]: The skill provides educational patterns for fintech integration using the Plaid API. It demonstrates secure coding practices including:
Storing sensitive access_token values using encryption (await encrypt(access_token)).
Proper use of environment variables for PLAID_CLIENT_ID and PLAID_SECRET.
Robust webhook verification using jwks-rsa to validate Plaid-signed JWTs.
Idempotency checks for webhook processing.
Use of specific, recommended API endpoints like /transactions/sync and /accounts/balance/get for real-time validation.
[DATA_EXPOSURE_EXFILTRATION]: The skill correctly identifies that access tokens are sensitive and provides patterns for encryption at rest. It does not hardcode real credentials, using standard environment variable placeholders instead.
[COMMAND_EXECUTION]: No shell command execution or subprocess spawning is present.
[REMOTE_CODE_EXECUTION]: No remote code downloads or dynamic execution patterns were found. The use of established libraries like plaid, jsonwebtoken, and jwks-rsa is appropriate for the stated purpose.

plaid-fintech