cc-skill-security-review
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and best-practice code snippets aimed at improving software security. No malicious patterns, obfuscation, or unauthorized data access were detected.
- [SECRET_MANAGEMENT]: The skill correctly identifies hardcoded credentials as an anti-pattern and recommends the use of environment variables. Examples provided are clearly labeled as placeholders for documentation purposes.
- [INPUT_VALIDATION]: The skill promotes the use of schema validation (Zod) and HTML sanitization (DOMPurify) to prevent common vulnerabilities like XSS and injection attacks.
- [SQL_INJECTION]: The skill explicitly warns against SQL string concatenation and provides safe patterns using parameterized queries and ORMs.
- [DEPENDENCY_MANAGEMENT]: The instructions recommend standard security auditing tools such as
npm auditto manage project dependencies safely.
Audit Metadata