secure-error-handling
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements environment-aware error handling, a security best practice that ensures detailed debugging information (like stack traces and system paths) is only visible in development environments, while production users receive generic error messages.
- [SAFE]: The logging implementation includes a redaction mechanism (
safelog) to prevent sensitive data like passwords, API keys, and credit card numbers from being written to persistent logs. - [SAFE]: The skill encourages the use of established security libraries such as
@clerk/nextjsfor authentication and incorporates input validation using schemas before processing data. - [SAFE]: All demonstrated code follows standard security patterns for Next.js and Node.js applications, including CSRF protection and rate limiting wrappers.
Audit Metadata