fullstack-expert

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides high-quality educational content and utility scripts for fullstack engineering without any malicious intent.
  • [COMMAND_EXECUTION]: Includes Python utility scripts (scripts/api_contract_validator.py and scripts/architecture_analyzer.py) designed for static analysis of project directories. These scripts use standard, safe Python libraries and do not perform any arbitrary code execution or remote operations.
  • [DATA_EXFILTRATION]: While the analysis scripts read configuration files like .env and package.json, they do so locally to verify security standards (such as confirming that sensitive files are excluded from version control). There is no logic for transmitting this data externally.
  • [PROMPT_INJECTION]: The instructions and role definitions within SKILL.md are strictly educational and do not contain patterns designed to bypass AI safety constraints or override system behavior.
  • [SAFE]: All external examples and references for Docker, Kubernetes, and CI/CD pipelines follow security best practices, including the use of non-root users and secure environment variable management.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 02:51 PM
Security Audit — agent-trust-hub — fullstack-expert