Safe backend 57

Skill Teycir/SkillsGuard/testskills/realworld/skills/safe-backend-57

Static security scanner for AI agent skill packages. Detects malicious SKILL.md files and bundled scripts before they run.

Install

npx -y skills add Teycir/SkillsGuard --skill safe-backend-57

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
14 stars14 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

0.2 KB, 34 tokens by cl100k_base, as published. Nobody here has run it

Backend Helper 57

Safe implementation of backend operations.

Usage

Standard backend workflow.

# Safe command
echo "Running backend"

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.

Gives 0 of the 12 instructions most data backend skills give in 34 tokens

Counted across 229 of the 229 authors here whose files we hold, read 2026-08-07

Separate business logic into service layersin 22 of 229, across 15 files
Retry failures with exponential backoffin 21 of 229, across 14 files
Select only needed database columnsin 20 of 229, across 13 files
Abstract data access into repository classesin 19 of 229, across 12 files
Use centralized error handlersin 17 of 229, across 10 files
Use AsNoTracking for read-only queriesin 16 of 229, across 4 files
Use async/await for all I/O operationsin 16 of 229, across 5 files
Implement structured loggingin 15 of 229, across 4 files
Use dependency injection for all servicesin 14 of 229, across 2 files
Use resource-based URLs for REST APIsin 13 of 229, across 7 files
Invalidate cache after data changesin 13 of 229, across 9 files
Use a dependency injection containerin 12 of 229, across 4 files

Said here and by no other author read

implement backend operations safely
run the backend using the standard workflow

Grouped from the skills themselves: near-identical wordings counted once, and counted by distinct author, so one author publishing three of these counts once. Length counted with cl100k_base; the agent that loads this file may tokenize it differently.