health-check-endpoints
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The Express.js reference implementation uses
child_process.execSyncto execute a staticdfcommand to retrieve disk space metrics. This is a common pattern for infrastructure monitoring but involves spawning a shell process at runtime. - [DATA_EXFILTRATION]: The health check endpoints are designed to return system-level diagnostic information, including uptime, version, and hardware usage. Additionally, raw error messages from failed dependency checks are included in the response. Developers should be careful to secure these endpoints or sanitize error messages to prevent unintended disclosure of environment details to unauthorized parties.
Audit Metadata