add-backend

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: All database operations in the provided templates utilize ORMs like Drizzle, Prisma, and SQLAlchemy, ensuring that queries are parameterized and protected against SQL injection.
  • [SAFE]: Input validation is consistently applied at the application boundaries using Zod schemas, ensuring data integrity and preventing malformed data processing.
  • [SAFE]: Authentication logic is built upon reputable libraries such as better-auth and Auth.js, employing secure password hashing algorithms like Argon2id and bcrypt.
  • [SAFE]: The templates include environment variable validation that forces the application to fail-closed in production if necessary security secrets are not configured.
  • [COMMAND_EXECUTION]: The skill includes a Prisma CLI wrapper script (scripts/prisma.ts) that uses spawnSync to execute local database management commands for schema pushing and client generation.
  • [EXTERNAL_DOWNLOADS]: The presets facilitate the installation of standard, well-known software dependencies from official package registries like NPM and PyPI using trusted tools like bun and uv.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 06:44 AM
Security Audit — agent-trust-hub — add-backend