fullstack-dev
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-provided requirements to generate architectural decisions and code. While this creates a surface for indirect prompt injection, the skill includes strong defensive instructions to mitigate risks.
- Ingestion points: User input for tech stack, service architecture, database selection, and authentication requirements in SKILL.md.
- Boundary markers: The skill uses a mandatory workflow and core principles to provide structure and prevent deviation from the intended development process.
- Capability inventory: The agent is instructed to use shell commands for build processes, health checks, and database migrations.
- Sanitization: The skill explicitly mandates strict input validation at boundaries using tools like Zod or Pydantic, and emphasizes parameterized queries to prevent SQL injection.- [COMMAND_EXECUTION]: The instructions direct the agent to perform verification steps using local shell commands such as npm build, curl for health checks, and database migration tools described in the references.
- [EXTERNAL_DOWNLOADS]: The skill references and recommends numerous well-known, industry-standard libraries and frameworks for development, which is expected for a guide of this nature.
Audit Metadata