backend-coding

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides high-quality, security-conscious backend development templates and guidance. It explicitly promotes industry best practices such as rigorous input validation, the use of parameterized queries to prevent SQL injection, secure password hashing (bcrypt/argon2), and proper JWT management.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes templates for building API endpoints that are designed to process external, untrusted data.
  • Ingestion points: REST, GraphQL, and gRPC endpoint definitions found in SKILL.md, references/nodejs-development.md, and references/python-development.md.
  • Boundary markers: The skill contains strong, explicit instructions to never trust user input and to validate all data at the entry point.
  • Capability inventory: The provided code examples include database interactions via ORMs (TypeORM, SQLAlchemy, Prisma), network operations for microservice communication (Axios, RabbitMQ, gRPC), and caching (Redis).
  • Sanitization: The skill incorporates standard validation and sanitization techniques using libraries like express-validator, Pydantic, and bcrypt throughout its code samples.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 02:25 AM