add-backend
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: All database operations in the provided templates utilize ORMs like Drizzle, Prisma, and SQLAlchemy, ensuring that queries are parameterized and protected against SQL injection.
- [SAFE]: Input validation is consistently applied at the application boundaries using Zod schemas, ensuring data integrity and preventing malformed data processing.
- [SAFE]: Authentication logic is built upon reputable libraries such as better-auth and Auth.js, employing secure password hashing algorithms like Argon2id and bcrypt.
- [SAFE]: The templates include environment variable validation that forces the application to fail-closed in production if necessary security secrets are not configured.
- [COMMAND_EXECUTION]: The skill includes a Prisma CLI wrapper script (
scripts/prisma.ts) that usesspawnSyncto execute local database management commands for schema pushing and client generation. - [EXTERNAL_DOWNLOADS]: The presets facilitate the installation of standard, well-known software dependencies from official package registries like NPM and PyPI using trusted tools like
bunanduv.
Audit Metadata