secure-code-guardian
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and accurate security guidance aligned with industry standards like the OWASP Top 10.
- [SAFE]: Code examples correctly prioritize defense-in-depth, including the use of bcrypt with appropriate salt rounds, JWT verification with expiration checks, and parameterized database queries to prevent SQL injection.
- [SAFE]: No sensitive data exposure or exfiltration patterns were identified; the skill explicitly instructs users to store secrets in environment variables rather than hardcoding them.
- [SAFE]: External dependencies referenced in the code snippets (such as Helmet, Zod, and DOMPurify) are well-known, legitimate security libraries used for their intended purposes.
- [SAFE]: The instructions do not contain prompt injection overrides or attempts to bypass AI safety filters.
Audit Metadata