backstage-patterns

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for building and customizing the Backstage open-source platform. All content is consistent with its stated purpose of providing development patterns.
  • [CREDENTIALS_UNSAFE]: The examples provided in the documentation correctly use environment variable interpolation (e.g., ${GITHUB_APP_CLIENT_SECRET}, ${POSTGRES_PASSWORD}) for secrets management. Hardcoded strings like abc123def456 are used as clear placeholders for demonstration purposes and do not represent actual exposed credentials.
  • [COMMAND_EXECUTION]: The skill contains command-line instructions using npx to execute official packages such as @techdocs/cli and @backstage/create-github-app. These are standard tools within the Backstage ecosystem for building documentation and initializing integrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 10:29 AM
Security Audit — agent-trust-hub — backstage-patterns