monday-code-init
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements critical multi-tenant isolation patterns by instructing the agent to include
accountIdfilters in all database queries to prevent cross-tenant data exposure. - [SAFE]: Employs official vendor libraries (
@mondaycom/apps-sdk,monday-sdk-js) and recommended security tools like theSecretsManagerandEnvironmentVariablesManagerfor handling sensitive configuration. - [SAFE]: Scaffolding logic uses standard package managers (npm) to install well-known and vendor-maintained dependencies without executing arbitrary remote scripts.
- [SAFE]: Follows security best practices for local development by providing
.env.exampletemplates and using mock data for development contexts rather than production credentials.
Audit Metadata