secure-code-guardian
Fail
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: CRITICAL
Full Analysis
- [EXTERNAL_DOWNLOADS]: References a documentation link hosted on GitHub Pages (
jeffallan.github.io). GitHub is a well-known service for project documentation and development resources. - [COMMAND_EXECUTION]: Explicitly warns against insecure shell execution using
exec()and provides secure alternatives usingexecFile()with positional argument arrays or specialized library functions likesharpto eliminate command injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a strong defensive posture by providing detailed patterns for input sanitization (DOMPurify) and schema validation (Zod) to prevent malicious data from influencing application logic.
- [SAFE]: The skill implements and teaches industry-standard security controls, including salted password hashing with
bcrypt, parameterized SQL statements viapg, secure session management withHelmet, and rate limiting to prevent brute-force attacks.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata