nitro
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation reference for Nitro v3, providing implementation patterns for web servers.
- [SAFE]: Hardcoded credentials found in documentation examples (e.g.,
basicAuth: { username: "admin", password: "secret" }) utilize common non-sensitive placeholders and do not represent a credential exposure risk. - [SAFE]: The skill correctly instructs users to manage sensitive credentials (like API keys and cron secrets) via environment variables using the
NITRO_prefix, which aligns with security best practices. - [SAFE]: External URLs referenced in the documentation, such as the GitHub API and h3.dev, are well-known developer resources and are used for instructional examples.
- [SAFE]: Tooling commands provided (e.g.,
nitro dev,nitro build) are the standard CLI operations for the Nitro framework and pose no inherent security risk.
Audit Metadata