typescript-full-stack
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance and code templates for building end-to-end TypeScript applications using reputable frameworks like Fastify, Next.js, and tRPC. All code samples follow secure coding practices.
- [EXTERNAL_DOWNLOADS]: References official Docker images (node:22-slim) and standard package management tools (pnpm). These are well-known technology services and represent standard development workflows.
- [COMMAND_EXECUTION]: Includes standard commands for package management (pnpm install), monorepo management (turbo), and container builds. These are documented for project setup and development purposes and do not involve malicious or silent background execution.
- [CREDENTIALS_SAFE]: Promotes the use of environment variables and .env files for secrets management, explicitly advising against hardcoding credentials or rolling custom cryptographic implementations.
- [PRIVILEGE_ESCALATION]: The provided Dockerfile templates follow best practices by using non-root users and dropping Linux capabilities to ensure a secure execution environment.
- [INDIRECT_PROMPT_INJECTION]: The skill mandates the use of Zod for schema validation at all application boundaries (API inputs, database operations, and frontend forms), which serves as an effective mitigation against data-driven injection attacks.
Audit Metadata