ccc-saas
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a robust set of tools and templates for building SaaS applications using modern frameworks like Next.js, Fastify, and Drizzle ORM.
- [COMMAND_EXECUTION]: The skill includes several Python scripts (
schema_analyzer.py,index_optimizer.py,metrics_calculator.py, etc.) designed to run locally. These scripts use only Python's standard library (e.g.,argparse,json,re,hashlib) and perform legitimate data processing tasks without dangerous side effects or network operations. - [DATA_EXPOSURE_AND_EXFILTRATION]: Instructions and templates for managing sensitive data (like Stripe keys or Auth secrets) follow industry best practices, recommending the use of
.envfiles and validated environment variables. No logic for sending sensitive files to external servers was found. - [INDIRECT_PROMPT_INJECTION]: While the skill includes tools that process external data (SQL schemas, query patterns, revenue numbers), the surface for indirect injection is minimal as these tools are static analyzers and do not execute instructions embedded in the processed data.
- [EXTERNAL_DOWNLOADS]: The skill recommends standard, well-known development dependencies (e.g.,
better-auth,drizzle-orm,stripe,tailwindcss) through official package registries like NPM and PyPI.
Audit Metadata