insecure-defaults-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation resource intended for security auditing and developer education. It contains no executable malicious code.
- [SAFE]: Vulnerable code examples (e.g., using 'keyboard cat' or 'default-secret-change-me') are clearly marked as anti-patterns for demonstration purposes and do not constitute credential exposure.
- [SAFE]: The provided detection patterns use standard command-line tools like ripgrep (rg) to identify common configuration weaknesses in source code.
- [SAFE]: The skill references established security standards such as CWE, OWASP, and CAPEC, and is based on resources from a known security research organization.
Audit Metadata