backend-dev-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive documentation set and instructional guide for backend development workflows.
- [SAFE]: It mandates the use of Zod v4 for validating all external input at API entry points, reducing the risk of injection attacks.
- [SAFE]: It enforces strict tenant isolation by requiring developers to filter all project-scoped database queries (PostgreSQL and ClickHouse) by
projectId. - [SAFE]: The guidelines promote secure configuration management by using Zod-validated environment variables, providing default values, and discouraging direct access to
process.env. - [SAFE]: It provides detailed reference patterns for authentication and authorization using composable tRPC middlewares and public API authentication services.
- [SAFE]: It includes proactive security instructions, such as loading a specialized security-review skill when handling user-supplied URLs or secrets.
Audit Metadata