node-best-practices
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and code examples promote secure development practices, such as environment variable validation using schemas (Zod, TypeBox), secrets management through dedicated services (AWS Secrets Manager, HashiCorp Vault), and log redaction of sensitive information using Pino.\n- [SAFE]: The documentation provides guidance on identifying and fixing common issues like memory leaks, event loop blocking, and race conditions in tests, improving overall application robustness.\n- [SAFE]: All external dependencies and tools mentioned (e.g., Fastify ecosystem, Pino, Zod, Platformatic, Autocannon) are well-known, reputable, and standard in the Node.js community.\n- [SAFE]: No evidence of prompt injection, data exfiltration, privilege escalation, or obfuscation was found. The use of dynamic imports and external analysis tools follows standard, legitimate development workflows.
Audit Metadata