nodejs-backend-patterns
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements and encourages security best practices for Node.js applications, including the use of 'helmet' for security headers, 'cors' for cross-origin resource sharing control, and 'express-rate-limit' to mitigate brute-force or DoS attacks.- [SAFE]: Data handling patterns demonstrate proper input validation using 'zod' and 'fastify' schemas, which reduces the risk of injection attacks from untrusted user input.- [SAFE]: Secret management guidance is handled via environment variables (e.g., 'JWT_SECRET', 'DB_PASSWORD'), avoiding hardcoded credentials in the codebase.- [EXTERNAL_DOWNLOADS]: The skill references well-known and reputable documentation sources including official framework guides (Express, Fastify) and recognized industry best practice repositories (Node Best Practices, Microsoft TypeScript Node Starter).
Audit Metadata