firstsun-dev-conventions
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation on coding standards and project architecture without including executable scripts or suspicious remote commands.
- [SAFE]: Guidance in
references/api.mdmandates authentication checks (verifyAuth) for administrative actions, promoting secure-by-default development practices. - [SAFE]: The CI/CD instructions in
references/cicd.mdadvise against using global API keys and recommend using GitHub Actions secrets (CLOUDFLARE_API_TOKEN) for deployment. - [SAFE]: The testing guidelines in
references/testing.mdemphasize using dedicated test environments with non-production keys (e.g., Turnstile test keys) to prevent accidental data exposure or production credential misuse.
Audit Metadata