backend-dev-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides structural guidance and code templates for building secure Node.js microservices. It emphasizes security-critical patterns such as input validation with Zod, centralized configuration management via
unifiedConfigto prevent secret leakage, and comprehensive error monitoring using Sentry. - [INDIRECT_PROMPT_INJECTION]: The skill acts as an instructional guide that responds to user development queries. 1. Ingestion points: User requests for code generation or architectural guidance. 2. Boundary markers: None explicitly defined in the provided instructions. 3. Capability inventory: The skill consists of documentation and templates; it lacks autonomous tool-execution or network capabilities. 4. Sanitization: The skill strongly recommends and provides patterns for Zod validation to sanitize all external data in generated services.
- [EXTERNAL_DOWNLOADS]: The documentation references standard and well-known Node.js libraries such as
express,zod,@prisma/client, and@sentry/node. These are reputable, industry-standard dependencies consistent with the skill's educational purpose.
Audit Metadata