grpc-service-development
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill contains standard gRPC boilerplate and documentation for defining service contracts and implementing microservice communication.\n- [COMMAND_EXECUTION]: Provides a shell script template (
scripts/validate-api.sh) for validating API specifications. The script uses safe shell practices (set -euo pipefail) and serves as a placeholder for development-time validation tasks.\n- [CREDENTIALS_UNSAFE]: Code examples utilize insecure transport credentials (createInsecure,add_insecure_port) and bind to all network interfaces (0.0.0.0,[::]). While insecure for production, the skill explicitly identifies this as a practice to avoid in production environments within its 'Best Practices' section, which is common for local development templates.
Audit Metadata