backend-principle-eng-nodejs-pro-max
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains purely instructional content for backend engineering. No patterns were detected that attempt to override agent safety filters or bypass system instructions.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file paths were found. The instructions explicitly recommend using vaults or KMS for secrets and redacting PII.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any network operations, download external scripts, or execute remote commands.
- [OBFUSCATION]: No evidence of Base64 encoding, zero-width characters, homoglyphs, or other techniques to hide malicious content was detected.
- [COMMAND_EXECUTION]: The skill does not contain any shell commands, subprocess calls, or scripts that execute on the host system.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize dynamic execution patterns or exclamation-backtick syntax in the SKILL.md file.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to analyze backend code, it lacks any automated tools, file-writing capabilities, or network-bound actions that could be exploited by malicious data processed at runtime.
Audit Metadata