write-api-route
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces a secure-by-default pattern using an
apiHandlerwrapper that centralizes security concerns like CORS, authentication resolution, and body parsing. - [SAFE]: It provides explicit instructions for input validation using Zod schemas, which mitigates injection risks by ensuring payloads match expected types and constraints.
- [SAFE]: The documentation identifies specialized security utilities, such as
_utils/_ssrf.tsfor safe URL fetching and_utils/_validation.tsfor HTML escaping and profanity filtering, promoting defensive programming. - [COMMAND_EXECUTION]: Instructions are provided for local development and testing commands (e.g.,
bun run dev:api,bun run test:api). These are standard developer operations within the local environment and do not involve untrusted input execution. - [EXTERNAL_DOWNLOADS]: The skill mentions integration with Vercel and Upstash Redis. These are well-known technology providers, and their inclusion in the developer workflow is documented as part of the intended architecture.
Audit Metadata