building-with-medusa
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an instructional framework for developers working with the MedusaJS platform. It focuses on architecture, type safety, and framework conventions.
- [COMMAND_EXECUTION]: The skill includes instructions for running standard development commands such as
npm run build,npx medusa db:migrate, andnpx medusa lint. It also providescurlexamples for testing local API endpoints. These are appropriate for the skill's primary purpose of guiding backend development. - [CREDENTIALS_UNSAFE]: The documentation correctly references sensitive configuration variables like
JWT_SECRETandCOOKIE_SECRETby instructing the developer to set them as environment variables in a.envfile, following industry best practices for secret management. - [REMOTE_CODE_EXECUTION]: The skill mentions installing legitimate framework packages via
npm install @medusajs/index, which is a standard procedure for extending the framework's functionality.
Audit Metadata