zod-schema
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational reference materials and does not include any scripts or malicious commands. It promotes secure coding practices and defensive validation strategies.
- [DATA_EXFILTRATION]: The skill provides positive security guidance to prevent data exposure, such as advising against logging raw input values and sensitive data in validation error messages.
- [REMOTE_CODE_EXECUTION]: The documentation warns against resource exhaustion attacks (DoS) via unbounded recursion and catastrophic backtracking in regular expressions, recommending the use of
.max()bounds and safe regex patterns. - [COMMAND_EXECUTION]: The documentation describes the use of Zod's key-stripping feature as a primary defense against mass assignment attacks when processing untrusted payloads.
- [SAFE]: Regarding indirect prompt injection surfaces, the skill provides a robust defensive framework by defining ingestion points (API, forms, DB, environment), establishing clear boundary markers (schemas), and detailing sanitization via Zod's parsing mechanisms.
Audit Metadata