secure-coding-practices
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of static documentation and code references designed to educate the agent on security best practices. It does not contain executable scripts or instructions to perform network operations or file system modifications independently.- [SAFE]: All code snippets provided follow security standards, such as using bcrypt/Argon2 for password hashing, implementing AES-256-GCM for encryption, and recommending the use of environment variables or Key Management Services (KMS) for secret storage.- [SAFE]: External tools and resources mentioned, including OWASP, NIST, Snyk, and Helmet.js, are well-known, reputable services and standards within the security industry.- [SAFE]: No patterns of obfuscation, credential exfiltration, or unauthorized privilege escalation were detected. The skill correctly identifies high-risk code patterns (like eval() or string concatenation in SQL) and provides safe alternatives.
Audit Metadata