building-with-medusa

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as an instructional framework for developers working with the MedusaJS platform. It focuses on architecture, type safety, and framework conventions.
  • [COMMAND_EXECUTION]: The skill includes instructions for running standard development commands such as npm run build, npx medusa db:migrate, and npx medusa lint. It also provides curl examples for testing local API endpoints. These are appropriate for the skill's primary purpose of guiding backend development.
  • [CREDENTIALS_UNSAFE]: The documentation correctly references sensitive configuration variables like JWT_SECRET and COOKIE_SECRET by instructing the developer to set them as environment variables in a .env file, following industry best practices for secret management.
  • [REMOTE_CODE_EXECUTION]: The skill mentions installing legitimate framework packages via npm install @medusajs/index, which is a standard procedure for extending the framework's functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:08 AM