security-craftsman
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides defensive security engineering guidelines and best practices focused on threat modeling, secret management, and injection defense.
- [SAFE]: The Go source code in
examples/secure_token_auth_and_dialer.godemonstrates secure programming patterns, specifically constant-time comparison to prevent timing attacks and IP range validation to prevent Server-Side Request Forgery (SSRF). - [SAFE]: All instructional content promotes fail-closed architectures, least privilege, and robust input sanitization, which are standard security industry recommendations.
Audit Metadata