fullstack-guardian
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured guidance for secure development and does not contain any malicious code, obfuscation, or data exfiltration patterns. It explicitly mandates security practices such as parameterized queries and server-side validation.
- [PROMPT_INJECTION]: The skill processes user-supplied feature requirements, creating a surface for indirect prompt injection. This is addressed by the skill's internal logic which prioritizes security implementation.
- Ingestion points: User-supplied feature requirements and acceptance criteria referenced in the 'Core Workflow' section of SKILL.md.
- Boundary markers: Absent; the instructions do not specify delimiters for external input.
- Capability inventory: Code generation for backend and frontend systems; no tool execution or filesystem writes are directly automated by the skill text itself.
- Sanitization: The skill explicitly requires the agent to implement input validation and output encoding in the generated code.
Audit Metadata