api-security-hardening
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation and code snippets for defensive security hardening. No malicious behavior or unsafe commands were detected.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides examples of handling external user input through API endpoints.\n
- Ingestion points: REST API routes defined in
SKILL.md(Express) andreferences/python-nginx.md(FastAPI).\n - Boundary markers: The code snippets demonstrate the use of validation middleware (
express-validator) and schema validation (Pydantic) to define strict boundaries for input data.\n - Capability inventory: The skill does not include any dangerous capabilities such as arbitrary command execution, file system writes, or network requests based on the processed data.\n
- Sanitization: The snippets explicitly implement sanitization using
escape-html,normalizeEmail, and custom password/name validators in Python.
Audit Metadata