security-and-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and documentation-based, providing best practices for secure software development and AI agent hardening. It contains no executable scripts or malicious instructions.
- [EXTERNAL_DOWNLOADS]: The documentation references well-known and industry-standard security libraries such as
zod,helmet,dompurify,bcrypt, andexpress-rate-limitin its code examples. These are trusted, widely-used packages in the development community. - [DATA_EXPOSURE]: The skill correctly identifies sensitive file paths (e.g.,
.env,.ssh/id_rsa,.aws/credentials) and environment variables as assets to be protected, providing clear instructions on how to avoid accidental exposure. - [INDIRECT_PROMPT_INJECTION]: The skill explicitly teaches mitigation strategies for indirect prompt injection (OWASP LLM01, LLM05), instructing the agent to treat model output as untrusted input and to validate it against strict schemas.
Audit Metadata