scaffold-fullstack-app
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation outlines a project architecture and provides templates for common application features like authentication, database schemas, and API routes. No executable code or malicious patterns were found within the instructions.
- [SAFE]: The skill promotes secure development practices, specifically emphasizing the use of
.env.examplefor credential management and implementing a "helper-only" access pattern to ensure all database queries are filtered by user ID, mitigating risks in environments without Row-Level Security (RLS). - [SAFE]: References to external services and libraries (GitHub, Next.js, Auth.js, Drizzle ORM, Brevo, Razorpay, Stripe, Vercel, and Neon) involve well-known, industry-standard providers and do not present security concerns.
Audit Metadata