backend-coding
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides high-quality, security-conscious backend development templates and guidance. It explicitly promotes industry best practices such as rigorous input validation, the use of parameterized queries to prevent SQL injection, secure password hashing (bcrypt/argon2), and proper JWT management.
- [INDIRECT_PROMPT_INJECTION]: The skill includes templates for building API endpoints that are designed to process external, untrusted data.
- Ingestion points: REST, GraphQL, and gRPC endpoint definitions found in
SKILL.md,references/nodejs-development.md, andreferences/python-development.md. - Boundary markers: The skill contains strong, explicit instructions to never trust user input and to validate all data at the entry point.
- Capability inventory: The provided code examples include database interactions via ORMs (TypeORM, SQLAlchemy, Prisma), network operations for microservice communication (Axios, RabbitMQ, gRPC), and caching (Redis).
- Sanitization: The skill incorporates standard validation and sanitization techniques using libraries like
express-validator,Pydantic, andbcryptthroughout its code samples.
Audit Metadata