secure-coding
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a pedagogical resource for secure coding and does not contain any executable malicious code or instructions.
- [SAFE]: Implementation examples utilize industry-standard security libraries such as 'jose' for JWT handling, 'zod' for schema validation, and 'argon2' for password hashing.
- [SAFE]: External references are limited to trusted organizations (e.g., Cloudflare, Vercel, Supabase) and official documentation for established frameworks and web standards (MDN, RFCs, OWASP).
- [SAFE]: The skill explicitly advises against dangerous practices such as hardcoding secrets, using unsafe parsers, failing to validate user input, and improper tenant isolation.
Audit Metadata