backend-event-driven
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides code snippets and architectural guidance for implementing event-driven systems. All included code is standard implementation logic (e.g., TypeScript classes for Event Buses, Outbox patterns, and Saga orchestrators) and does not contain malicious shell commands or unauthorized execution patterns.
- [CREDENTIALS_UNSAFE]: The skill explicitly instructs developers to avoid including secrets, PII, or passwords in event payloads. It recommends using dedicated secrets management tools (e.g., HashiCorp Vault, AWS Secrets Manager) and rotating credentials regularly.
- [EXTERNAL_DOWNLOADS]: The skill references industry-standard tools and container images from well-known sources, such as official Confluent Docker images and standard NPM packages like
@kafkajs/confluent-schema-registry. No suspicious or unverified remote scripts are downloaded or executed. - [REMOTE_CODE_EXECUTION]: There are no patterns involving the execution of remote code. The skill is purely instructional, providing design templates and code examples for building robust backend services.
- [PROMPT_INJECTION]: The instructions do not contain any bypass attempts, role-play injections, or instructions to ignore safety filters. The agent protocol is strictly defined for architectural design tasks.
Audit Metadata