security-review
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely educational and instructional. It provides clear 'Dos' and 'Don'ts' for common security challenges like SQL injection, cross-site scripting (XSS), and authentication handling.
- [SAFE]: The mention of an OpenAI API key pattern (
sk-proj-xxxxx) is explicitly documented as a negative example of hardcoding secrets, serving to improve the security posture of code generated or reviewed by the agent. - [SAFE]: Infrastructure guidelines for AWS, Vercel, and Cloudflare follow well-known security benchmarks (e.g., CIS AWS Foundations) and recommend using native platform security features like IAM roles, Secrets Manager, and WAF.
- [SAFE]: Code examples use reputable and widely-used open-source libraries (e.g., Zod for validation, DOMPurify for sanitization) to demonstrate secure implementations.
Audit Metadata