in-app-notifications-fullstack
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical implementation guide for building notification systems. It does not contain any executable malicious code, obfuscation, or remote data fetching patterns.- [DATA_EXFILTRATION]: The skill correctly handles user data within the context of a private application backend. No unauthorized external data transmission patterns were identified. The network communication described is limited to standard application API endpoints.- [CREDENTIALS_UNSAFE]: The skill demonstrates secure coding practices by using placeholders and middleware references (requireAuth) rather than hardcoding sensitive credentials, tokens, or private keys.- [COMMAND_EXECUTION]: The provided code snippets are limited to application-level logic using TypeScript, Express, and SQL. There is no evidence of dangerous system-level command execution or shell spawning.- [PRIVILEGE_ESCALATION]: The skill specifically includes code to prevent privilege escalation by using user-specific guards in database updates (e.g., using userId in prisma.updateMany), which is a best practice for preventing IDOR attacks.
Audit Metadata