nodejs-express-skill
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces a secure middleware pipeline, placing security-focused libraries like Helmet and CORS at the beginning of the chain to protect the application from the first byte.
- [SAFE]: Input validation is a core requirement of the skill, using Zod schemas to sanitize all incoming data (body, query, params) before it reaches the controller logic.
- [SAFE]: The skill provides robust patterns for authentication and authorization using JWT, including guidance on short expiration times and role-based access control.
- [SAFE]: Environment variable management is handled securely through typed Zod validation and
.envfile patterns, ensuring no secrets are hardcoded in the source code. - [SAFE]: The provided code samples for graceful shutdown (SIGTERM/SIGINT handling) and error logging (Pino) follow industry standards for resilient and observable backend services.
Audit Metadata