Hi - I answer from the OpenSmartRoute documentation: routing, the API, plans and quotas, self-hosting. Ask away, or open a support ticket if you need a person.
Grounded in the docs - follow a source before acting on it.
Instruction file imported from AkashaHQ/Vidya (.github/instructions/security.instructions.md). Copyright stays with the author.
Security Guidelines
No hardcoded secrets — never hardcode API keys, tokens, or credentials in source code. All secrets must come from environment variables or the plugin config object.
No sensitive logging — do not log API keys, authentication tokens, or full embedding vectors. Redact or omit sensitive values in log output.
Input validation — validate and sanitize user input before passing it to external APIs (Voyage, OpenAI, Jina, LanceDB).
URL normalization — always use normalizeBaseUrl() from src/utils.ts when handling base URLs for API endpoints. This prevents SSRF and ensures consistent URL formatting.
Use it
Copy one of these into your project. Installing also returns the manifest and these snippets.
yaml
targets:
- https://api.opensmartroute.ai/api/v1/registry/akashahq-vidya-security-instructions/manifest # or paste the manifest below
Manifest
An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.
akashahq-vidya-security-instructions.ocm.jsonjson
{
"ocm": "1",
"id": "akashahq-vidya-security-instructions",
"kind": "skill",
"name": "security",
"description": "Security Guidelines",
"publisher": "AkashaHQ",
"version": "1.0.0",
"capabilities": {
"domains": [
"general"
],
"tags": [
"skill-md",
"github-instructions"
],
"languages": [
"en"
]
},
"quality_prior": 0.6,
"examples": [
"Security Guidelines"
],
"primary": false,
"metadata": {
"source": {
"provider": "github-instructions",
"repository": "https://github.com/AkashaHQ/Vidya",
"path": ".github/instructions/security.instructions.md",
"ref": "1b014dcf38fc8931c2e261828023d3c7ef121b48",
"url": "https://github.com/AkashaHQ/Vidya/blob/1b014dcf38fc8931c2e261828023d3c7ef121b48/.github/instructions/security.instructions.md",
"key": "AkashaHQ/Vidya/.github/instructions/security.instructions.md"
},
"applies_to": "**/*"
},
"instructions": "# Security Guidelines\n\n- **No hardcoded secrets** — never hardcode API keys, tokens, or credentials in source code. All secrets must come from environment variables or the plugin config object.\n- **No sensitive logging** — do not log API keys, authentication tokens, or full embedding vectors. Redact or omit sensitive values in log output.\n- **Input validation** — validate and sanitize user input before passing it to external APIs (Voyage, OpenAI, Jina, LanceDB).\n- **URL normalization** — always use `normalizeBaseUrl()` from `src/utils.ts` when handling base URLs for API endpoints. This prevent",
"cost": {
"context_tokens": 161
}
}
Fetch it by URL: GET /api/v1/registry/akashahq-vidya-security-instructions/manifest?version=1.0.0
Reviews
Star ratings from people who tried it. One review per account; edit yours any time.
No reviews yet. Install it, try it, and be the first to rate it.
