engineering-backend-architect
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's instructions and reference documentation consistently promote security best practices, including the use of parameterized queries to prevent SQL injection, short-lived JWTs for authentication, and the principle of least privilege for cloud infrastructure.
- [COMMAND_EXECUTION]: The script
scripts/check_api_health.shperforms network probes usingcurl. The implementation is secure as it uses the-o /dev/nullflag to discard response bodies, preventing the ingestion of potentially malicious content from remote servers while providing necessary diagnostic metadata like status codes and latency. - [INDIRECT_PROMPT_INJECTION]: The Python script
scripts/analyze_schema.pyis designed to analyze local SQL files. It uses regular expressions for structural analysis and does not execute the SQL commands, which mitigates the risk of processing malicious or injected code within the data files. - [EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries such as
pg(PostgreSQL client for Node.js),ioredis, andzodfor validation. There are no patterns suggesting the download or execution of unverified remote scripts.
Audit Metadata