security-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard security implementation workflows and checklists.
- [SAFE]: Authentication patterns for JWT and Session-based auth follow industry best practices, including the use of HttpOnly cookies and proper secret management via environment variables.
- [SAFE]: Password handling correctly identifies weak algorithms as anti-patterns and demonstrates the use of bcrypt with an appropriate cost factor.
- [SAFE]: Secrets management implementation explicitly warns against hardcoding secrets in source code and recommends environment variables or dedicated secret managers.
- [SAFE]: Encryption patterns use secure algorithms (AES-256-GCM) and handle IVs/auth tags correctly.
- [SAFE]: Input validation examples demonstrate the use of Zod for schema enforcement and warn against SQL injection, recommending parameterized queries.
- [SAFE]: Dependencies referenced (jsonwebtoken, bcrypt, helmet, zod, etc.) are well-known, industry-standard libraries for their respective security tasks.
Audit Metadata