nodejs-backend
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard production patterns for Node.js, including framework usage (Fastify/Express), security headers (Helmet/CORS), and performance optimizations (Streams/Worker Threads).
- [SAFE]: Secret management follows industry standards by referencing environment variables rather than hardcoding credentials.
- [SAFE]: The file upload example in
references/streams.mdcorrectly uses Node.js streams to handle large files efficiently. While the code snippet for saving uploads lacks explicit filename sanitization to prevent path traversal, this is presented as a structural example for users rather than a malicious payload.
Audit Metadata