security-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Technical instructions and code templates provide guidance on implementing standard security controls like Helmet headers, rate limiting, and CSRF protection using well-known Node.js libraries.\n- [SAFE]: The skill demonstrates secure handling of sensitive data by using placeholders for API keys and recommending the use of environment variables rather than hardcoded secrets.\n- [SAFE]: Analysis of all skill files, including metadata and provided examples, revealed no evidence of malicious intent, prompt injection, or data exfiltration.\n- [SAFE]: The skill documentation aligns with security best practices by explicitly prohibiting dangerous operations such as dynamic code evaluation via eval() and insecure direct file access.
Audit Metadata