fullstack-guardian

Fail

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes a documentation link to the author's GitHub Pages site. While automated scanner reputation lists flagged the URL, it is a resource hosted on a well-known service and belongs to the identified author.
  • [SAFE]: The skill's core workflow and constraints prioritize security, explicitly requiring the use of parameterized queries to prevent SQL injection and output sanitization to mitigate XSS risks.
  • [SAFE]: Deployment templates, such as the Docker configuration in references/backend-patterns.md, follow industry best practices by utilizing non-root users (USER nodejs) and multi-stage builds to minimize the attack surface.
  • [SAFE]: The provided code examples and reference guides demonstrate standard, secure implementation patterns for authentication, authorization, and error handling across both frontend and backend layers.
  • [SAFE]: The skill explicitly forbids the hardcoding of credentials or secrets, recommending secure environment variable management as a standard practice.
Recommendations
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 16, 2026, 05:52 AM