security-best-practices
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely defensive in nature. It provides comprehensive security specifications for Go, Python (Django, Flask, FastAPI), and JavaScript/TypeScript (Express, React, Next.js, Vue, jQuery) to guide the agent in performing security reviews.
- [SAFE]: While the reference files contain examples of insecure code patterns (e.g., command injection or unsafe deserialization), these are explicitly labeled as targets for detection during an audit and are not instructions for the agent to execute.
- [SAFE]: The skill follows secure practices for handling user data, instructing the agent to produce a report and request user confirmation before applying any fixes.
- [SAFE]: All external URL references point to trusted documentation sources, including MDN, OWASP, and official framework websites.
Audit Metadata