dido-backend

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The guidelines explicitly promote robust security measures such as timing-attack mitigation using fictive bcrypt hashes for non-existent users and the use of HttpOnly cookies for session management.
  • [COMMAND_EXECUTION]: The skill refers to standard development commands such as npm run db:migrate and npx prisma generate for managing the project's database schema.
  • [INDIRECT_PROMPT_INJECTION]: The documentation addresses the ingestion of untrusted data by requiring strict schema validation with Zod in the controller layer and implementing clear boundary markers between input validation and business logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:26 PM