kotlin-ktor-patterns
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structural templates and code patterns for Ktor server development, focusing on standard framework features without introducing malicious logic.\n- [SAFE]: Demonstrates secure secret management practices by using environment variable placeholders (e.g.,
${JWT_SECRET}) in the configuration files instead of hardcoding credentials.\n- [SAFE]: Promotes defensive programming through patterns for JWT authentication, authorization of specific routes, and comprehensive server-side request validation.\n- [SAFE]: Configures security-sensitive plugins like CORS using the principle of least privilege, restricting allowed hosts and headers.\n- [SAFE]: The provided patterns for WebSockets and integration testing follow standard Ktor documentation and industry security guidelines.
Audit Metadata