security-best-practices

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is entirely educational, providing boilerplate code for Express.js security (using Helmet, rate limiting, and Joi validation). No executable scripts or suspicious commands are included in the skill package.
  • [SAFE]: Code examples for secret management use standard placeholders (e.g., 'sk_test_xxx', 'your-super-secret-key') and explicitly instruct the user to use environment variables and avoid committing secrets to version control.
  • [SAFE]: All external references point to legitimate security resources and well-known libraries like OWASP, Helmet.js, and established GitHub repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 09:37 PM
Security Audit — agent-trust-hub — security-best-practices