backend
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard boilerplates for Express, NestJS, and FastAPI applications using well-known libraries and security best practices.
- [SAFE]: Includes defensive patterns such as security headers (via Helmet), CORS configuration, and rate limiting to protect API endpoints from common web attacks.
- [SAFE]: Implements secure password handling using Argon2 hashing and utilizes environment variables for sensitive configuration like JWT secrets and database connection strings, following industry standards for secret management.
- [SAFE]: Provides proactive validation rules (regex-based) and architectural advice to prevent common security pitfalls such as SQL injection, N+1 queries, information disclosure, and hardcoded credentials.
- [SAFE]: All identified dependencies are standard, well-maintained packages from official registries (NPM and PyPI).
Audit Metadata