Sign in Get started

security - Skill - OpenSmartRoute

Skillv1.0.0

security

Security Instructions

by juanmopy(0) 0 installs

Free

Sign in to install

Free account. Installing gives you the manifest plus copy-paste snippets.

About

Instruction file imported from juanmopy/whoami (.github/instructions/security.instructions.md). Copyright stays with the author.

Security Instructions

Input Handling

SIEMPRE validar inputs del usuario con zod (backend) o Validators (Angular)
SIEMPRE sanitizar HTML con DomSanitizer antes de renderizar
NUNCA usar innerHTML directamente — usar [innerHTML] con pipe de sanitización
NUNCA usar eval(), Function(), o document.write()

Dependencies

Usar versiones exactas (no rangos ^/~)
Verificar licencia antes de agregar dependencia
Ejecutar npm audit después de agregar dependencia
Preferir dependencias con pocos sub-dependencies

API Calls

SIEMPRE usar HttpClient de Angular (no fetch directo)
SIEMPRE manejar errores con catchError
NUNCA exponer API keys en código frontend
Usar environment files para URLs de API

Links Externos

SIEMPRE agregar rel="noopener noreferrer" a target="_blank"
SIEMPRE usar HTTPS para recursos externos
Implementar SRI para scripts/styles de CDN

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/juanmopy-whoami-security-instructions/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

juanmopy-whoami-security-instructions.ocm.jsonjson

{
  "ocm": "1",
  "id": "juanmopy-whoami-security-instructions",
  "kind": "skill",
  "name": "security",
  "description": "Security Instructions",
  "publisher": "juanmopy",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "github-instructions"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Security Instructions"
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github-instructions",
      "repository": "https://github.com/juanmopy/whoami",
      "path": ".github/instructions/security.instructions.md",
      "ref": "7641d6745ca4198d1e774a4f66088426962e9438",
      "url": "https://github.com/juanmopy/whoami/blob/7641d6745ca4198d1e774a4f66088426962e9438/.github/instructions/security.instructions.md",
      "key": "juanmopy/whoami/.github/instructions/security.instructions.md"
    },
    "applies_to": "**/*.ts"
  },
  "instructions": "# Security Instructions\n\n## Input Handling\n- SIEMPRE validar inputs del usuario con zod (backend) o Validators (Angular)\n- SIEMPRE sanitizar HTML con DomSanitizer antes de renderizar\n- NUNCA usar `innerHTML` directamente — usar `[innerHTML]` con pipe de sanitización\n- NUNCA usar `eval()`, `Function()`, o `document.write()`\n\n## Dependencies\n- Usar versiones exactas (no rangos ^/~)\n- Verificar licencia antes de agregar dependencia\n- Ejecutar `npm audit` después de agregar dependencia\n- Preferir dependencias con pocos sub-dependencies\n\n## API Calls\n- SIEMPRE usar HttpClient de Angular (no fetch d",
  "cost": {
    "context_tokens": 227
  }
}

Fetch it by URL: GET /api/v1/registry/juanmopy-whoami-security-instructions/manifest?version=1.0.0