fullstack-guardian

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides industry-standard security practices, including parameterized queries for SQL injection prevention, Zod/Pydantic schemas for input validation, and secure HTTP header configurations.
  • [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety guardrails, or extract system prompts were detected in the instructions or metadata.
  • [DATA_EXFILTRATION]: There are no commands or code patterns that attempt to access sensitive files (e.g., SSH keys, AWS credentials) or exfiltrate data to external domains.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or passwords are present. The skill correctly instructs users to manage secrets through environment variables.
  • [REMOTE_CODE_EXECUTION]: The skill does not download or execute remote scripts. All code references are static templates for application development using well-known, safe package registries.
  • [COMMAND_EXECUTION]: No dangerous shell commands or privilege escalation attempts were found. Terminal examples are limited to standard development workflows like 'npm run build' or 'docker build'.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 10:06 PM