error-handling
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- Log Sanitization and Sensitive Data Protection: The skill documentation outlines a robust defense-in-depth approach for protecting sensitive information. It introduces utility functions such as
redact_token,sanitize_url, andsanitize_params, alongside a globalSensitiveDataFilter. These mechanisms are designed to identify and redact passwords, tokens, API keys, and JWTs from server logs, which is a proactive security practice for preventing data exposure. - Structured Error Reporting: The skill enforces a consistent protocol for API responses, distinguishing between success, validation errors, and authentication failures. By utilizing structured error bodies and a global error handler, it helps ensure that raw backend exceptions and internal stack traces are not leaked to the frontend, thereby reducing the risk of information disclosure.
- Auth Error Handling: The protocol explicitly handles authentication and authorization errors (
401and403status codes), ensuring that these security-relevant events are correctly categorized and communicated to the frontend client through dedicated handlers.
Audit Metadata