solid-2-full-stack
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The instructions promote secure environment variable handling by using a schema-based validation approach (via Zod) and a virtual module system (
virtual:env/server) that ensures secrets likeDATABASE_URLorSESSION_SECRETare never exposed to the client-side bundle. - [SAFE]: It emphasizes the use of
server-onlymarkers to explicitly prevent server-side logic and database clients from being imported into client components, mitigating potential data exposure risks through bundle isolation. - [SAFE]: The documentation includes security-critical configurations such as CSRF protection for server functions (via
configureServerFunctionsServer) and provides guidance on implementing authentication and request-level security within the middleware layer. - [SAFE]: No malicious patterns, such as prompt injection, unauthorized network exfiltration, or obfuscated code, were detected in the skill files. The technical guidance aligns with the official SolidJS ecosystem best practices.
Audit Metadata