secure-development-policy
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a formal policy framework for secure development without including any executable code or risky instructions.
- [SAFE]: External references are limited to the author's (hack23) official GitHub repositories, well-known security tools (SonarCloud, FOSSA, OpenSSF), and documented reference implementations.
- [SAFE]: It mandates security best practices, such as pinning GitHub Actions to SHA commits, implementing secret scanning, and enforcing least privilege for agent operations.
Audit Metadata