kotlin-ktor-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were identified in the file.
- [CREDENTIALS_UNSAFE]: The skill demonstrates secure credential handling by using environment variable placeholders (such as '${JWT_SECRET}' and '${DATABASE_URL}') in the application.yaml file, avoiding the risk of hardcoded secrets.
- [PROMPT_INJECTION]: The skill demonstrates patterns for handling untrusted data, which constitutes an indirect prompt injection surface. Evidence chain: 1. Ingestion points: 'UserRoutes.kt' (path parameters and request bodies); 2. Boundary markers: Authentication blocks via Ktor's 'authenticate' DSL; 3. Capability inventory: Network operations via 'embeddedServer' and HTTP client tests; 4. Sanitization: Explicitly demonstrates input validation using regular expressions and requirement checks.
Audit Metadata