node-best-practices
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: CRITICALMETADATA_POISONINGEXTERNAL_DOWNLOADSSAFE
Full Analysis
- [METADATA_POISONING]: The skill documentation contains external links that have been identified as malicious phishing domains by automated security scanners.
- Evidence: The domain
sergiobernal.comand its HTTPS variant were detected in the skill's reference material and flagged for phishing (Detection ID: UR04C4CC8A9D4E1DAA-0200). - [EXTERNAL_DOWNLOADS]: The skill's Docker best practice guides demonstrate downloading binaries from external sources.
- Evidence:
ADD https://github.com/krallin/tini/releases/download/${TINI_VERSION}/tini /tiniinreference/sections/docker/bootstrap-using-node.mdandreference/sections/docker/graceful-shutdown.md. - Context: The downloads target GitHub, which is a recognized and trusted service. The action is documented as a best practice for process management in containers.
- [SAFE]: The core content of the skill is educational, providing comprehensive and standard industry guidance for Node.js development, error handling, security, and production readiness.
- Context: The material is adapted from the well-known 'Node.js Best Practices' repository and focuses on improving application security and stability.
Recommendations
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata