twelve-factor
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource for architectural best practices. Analysis of the instructions, metadata, and provided code snippets (Dockerfile, TypeScript, and JSON) revealed no security issues.
- [SAFE]: The code snippets demonstrate secure development practices, such as using schema validation for environment variables and implementing graceful shutdowns to prevent resource leaks.
- [SAFE]: The referenced Node.js packages (express, pg) are well-known, versioned dependencies from the official NPM registry. The Dockerfile uses standard official images (node:20-alpine).
- [SAFE]: No prompt injection, data exfiltration, obfuscation, or unauthorized command execution patterns were detected. The skill explicitly advises against hardcoding secrets, aligning with standard security best practices.
Audit Metadata