secure-code-guardian
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and defensive security guidance for implementing core application security features including JWT authentication and bcrypt password hashing.\n- [EXTERNAL_DOWNLOADS]: References well-known, industry-standard Node.js libraries such as zod, helmet, dompurify, and jsonwebtoken within its implementation examples for input validation and security hardening.\n- [SAFE]: Documentation for preventing OWASP Top 10 vulnerabilities (such as SQL injection and XSS) correctly promotes the use of parameterized queries and output encoding.\n- [SAFE]: Security configuration advice for cookies and headers follows modern safety standards, including the use of httpOnly, secure flags, and strict CSP directives.
Audit Metadata