api-hardening
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive security guide for API hardening. It provides defensive recipes for Express.js and FastAPI, correctly identifying risks like SQL injection (CWE-89), command injection (CWE-78), and unsafe deserialization (CWE-502). It explicitly warns against dangerous functions (e.g.,
os.system,eval,pickle.loads) and provides safe, industry-standard alternatives such as Zod, Pydantic, and parameterized queries. The skill includes a proactive verification step that requires the agent to research current security standards and active exploitation catalogs (CISA KEV, CVE) before applying advice, ensuring the content remains current. No malicious patterns, obfuscation, or data exfiltration attempts were detected.
Audit Metadata