backend-dev-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of technical documentation and code templates following industry-standard best practices for backend architecture. No malicious code, prompt injections, or unauthorized data access patterns were identified during the analysis.
- [DATA_EXFILTRATION]: The guidelines explicitly advocate for security-first configuration management, instructing developers to use a centralized configuration pattern and to avoid committing sensitive files (such as .env, config.ini, and private keys) to version control systems.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an architecture for processing user-supplied data and code but includes strong mitigations by requiring schema-based validation (Zod) for all ingested data to prevent injection attacks at the application layer.
- [REMOTE_CODE_EXECUTION]: All referenced dependencies are standard, well-known Node.js libraries (e.g., Express, Prisma, Sentry). No patterns for downloading or executing unverifiable remote scripts were found.
Audit Metadata