security
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a defensive instructional guide, promoting the use of environment variable protection, parameterized queries to prevent SQL injection, and robust input validation using libraries like Zod and Pydantic.
- [EXTERNAL_DOWNLOADS]: The skill references and utilizes tools from well-known repositories and services, including Yelp's detect-secrets for pre-commit hooks, Truffle Security's TruffleHog for secrets scanning, and official GitHub Actions (checkout, setup-node, setup-python, codeql) for CI/CD pipeline security.
- [COMMAND_EXECUTION]: The instructions include a local utility script (
scripts/security-check.sh) designed to automate pre-commit validation, checking for staged secrets and auditing dependencies using standard commands like npm audit and safety check.
Audit Metadata