oma-backend
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements comprehensive security guardrails, specifically mandating bcrypt (cost factor 10-12) for password hashing and rate limiting for authentication endpoints.
- [SAFE]: Data exposure risks are mitigated by a core rule that strictly forbids hardcoding credentials, requiring the use of environment variables or secret managers for database URLs and API keys.
- [SAFE]: The skill promotes secure database interactions by enforcing the use of parameterized queries or ORMs, which protects against SQL injection attacks.
- [SAFE]: The inclusion of a detailed ORM reference and verification checklist ensures that the agent follows performance and security standards, such as avoiding N+1 query problems and validating all inputs with proper schemas.
Audit Metadata