security-best-practices
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content on securing web applications, including implementation of security headers, rate limiting, and CSRF protection.
- [INDIRECT_PROMPT_INJECTION]: While the skill demonstrates processing user-supplied data (e.g.,
req.body), it incorporates robust defense mechanisms including input validation via Joi and output sanitization via DOMPurify. - [CREDENTIALS_UNSAFE]: The skill demonstrates secret management best practices by using environment variables and placeholders for sensitive keys (e.g., Stripe, SendGrid), and provides explicit instructions not to commit these to version control.
Audit Metadata