backend-developer
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script (
scripts/deploy.sh) that automates deployment tasks using industry-standard tools. It executes Docker commands to build and test images, and interacts with cloud platforms viakubectl,aws ecs, andgcloud run. These operations are transparent and consistent with the skill's stated purpose of backend infrastructure management. - [DYNAMIC_EXECUTION]: The skill utilizes several Python scripts (e.g.,
scaffold_api.py,generate_model.py,setup_auth.py) that generate application source code, configuration files, and database models from predefined templates. This dynamic file generation is used exclusively for project bootstrapping and follows recognized architectural patterns. - [EXTERNAL_DOWNLOADS]: The documentation references downloading project boilerplates from well-known and trusted services, such as fetching Java starter projects from Spring Initializr (
start.spring.io). These downloads are standard developer workflows and originate from official vendor domains. - [CREDENTIALS_SAFE]: The skill emphasizes the importance of not hardcoding secrets. It provides examples of using
.envfiles and environment variables, and includes placeholders like'your-secret-key'in sample code to guide users toward secure configuration practices.
Audit Metadata