error-handling-contracts
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance for designing error envelopes and mapping domain failures to status codes. It does not contain executable code, network operations, or file system access.- [SAFE]: The skill explicitly includes safety rules to prevent the exposure of stack traces, secrets, SQL, internal hosts, or sensitive user data in client-facing error messages, which aligns with security best practices.- [INDIRECT_PROMPT_INJECTION]: While the skill ingests user requirements for backend design, it possesses no dangerous capabilities such as shell execution, file writing, or network requests that could be leveraged for an attack. The potential for indirect prompt injection is negligible given the purely descriptive nature of the tool's output.
Audit Metadata