fastify
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality documentation for the Fastify framework, including 13 detailed reference files covering topics from core architecture to production deployment.
- [SAFE]: External downloads and references are directed exclusively to trusted sources including the official Fastify domain (fastify.dev), official GitHub repositories (github.com/fastify/*), and the npm registry. These are documented neutrally and comply with best practices for development tools.
- [SAFE]: The included maintenance script (
scripts/check-updates.py) performs benign operations, such as checking for the latest version of Fastify on the official npm registry and verifying local file integrity. It contains no evidence of remote code execution or data exfiltration. - [SAFE]: Instructions for handling sensitive data, such as JWT secrets and session keys, correctly advise using environment variables and established security plugins (@fastify/jwt, @fastify/helmet, etc.), promoting secure development practices.
Audit Metadata