security-and-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational guidance and secure code snippets for preventing common vulnerabilities, such as using parameterized queries to stop SQL injection and output encoding to prevent XSS.
- [SAFE]: Includes best practices for session management, advising the use of httpOnly and secure cookies, and demonstrates strong password hashing using the bcrypt library.
- [SAFE]: Provides a defensive code pattern for mitigating Server-Side Request Forgery (SSRF) by resolving hostnames to IP addresses and verifying they are not in private or reserved ranges before fetching.
- [SAFE]: Addresses AI-specific security risks (OWASP for LLMs), recommending that all model output be treated as untrusted data and advising against placing sensitive information or secrets in model prompts.
- [SAFE]: Promotes strong supply chain hygiene by instructing users to audit dependencies, block unreviewed installation scripts, and manage secrets using environment variables rather than hardcoding them.
Audit Metadata