fullstack-developer
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides boilerplate code and implementation guides that adhere to industry standards for security. For example, sensitive configuration is managed through environment variables (e.g.,
process.env.NEXT_PUBLIC_FIREBASE_API_KEY,process.env.STRIPE_SECRET_KEY) rather than hardcoded credentials. - [SAFE]: The code snippets demonstrate proper input validation and sanitization using the Zod library to protect against malformed data and potential injection attacks in both frontend forms and backend API routes.
- [SAFE]: All external services referenced (Firebase, Stripe, Vercel, JazzCash, EasyPaisa) are well-known, reputable providers. The implementation of these services follows official integration patterns, such as verifying Stripe signatures in webhooks and using secure hashing for JazzCash transactions.
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized privilege escalation were detected. The skill's instructions are consistent with its stated purpose of facilitating full-stack development.
Audit Metadata