sveltekit

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code recipes for SvelteKit development using a feature-slice architecture.
  • [SAFE]: Authentication patterns described in auth-sessions.md follow best practices by using signed JWT cookies and advising the use of environment variables for secrets (PRIVATE_JWT_SECRET).
  • [SAFE]: The build and configuration recipes in config-and-build.md use standard, well-known dependencies and follow official SvelteKit deployment guidelines.
  • [SAFE]: The service client recipe in service-clients.md includes a local development script for generating TypeScript types from OpenAPI specifications. The script uses hardcoded configuration and standard CLI tools (openapi-typescript).
  • [SAFE]: The skill promotes the use of Zod for runtime validation of all data entering the application from databases or external APIs, which is a strong security practice for preventing injection and data integrity issues.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 04:54 PM
Security Audit — agent-trust-hub — sveltekit