security-review
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a best-practices reference for securing code and infrastructure. It includes examples of insecure patterns (e.g., hardcoded secrets) to educate the agent on what to identify and fix, rather than implementing them.- [EXTERNAL_DOWNLOADS]: Mentions well-known security tools and libraries such as TruffleHog and standard NPM security commands for auditing purposes within documented examples.- [CREDENTIALS_UNSAFE]: References API key patterns (e.g., 'sk-proj-xxxxx') strictly as examples of insecure practices to be avoided.
Audit Metadata