api-framework-express
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting external data through request parameters, query strings, and body content (e.g., in examples/routing.md). This represents a standard attack surface for indirect prompt injection or data-driven attacks. However, the skill provides specific guidance on implementing validation middleware and using security-focused packages to mitigate these risks.- [SAFE]: The skill promotes industry-standard security practices for Express.js development. This includes the use of helmet for security headers, CORS with explicit origin allowlists, and express-rate-limit to prevent abuse. All code examples follow defensive programming patterns such as centralized error handling and proper middleware sequencing.
Audit Metadata