nodejs-development
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents standard CLI commands and flags used for Node.js development, such as profiling with --cpu-prof, building native modules with node-gyp, and using make for Node.js core contribution workflows.\n- [DYNAMIC_EXECUTION]: Provides detailed guidance on creating and implementing native C++ addons via the N-API (Node-API) interface, which is a standard method for extending the runtime with compiled code for performance improvements.\n- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on handling external data via Fastify request objects. It promotes safe patterns by recommending strict input validation and authentication.\n
- Ingestion points: Request bodies, query strings, and parameters in Fastify routes as described in SKILL.md Section B.\n
- Boundary markers: Encourages Fastify plugin encapsulation and explicit schema definitions.\n
- Capability inventory: Involves standard development capabilities such as file system operations, network requests for APIs, and project build tools.\n
- Sanitization: Explicitly recommends using TypeBox for strict schema-based validation and serialization of all external inputs.
Audit Metadata