saas-mvp-launcher
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational resource and architectural guide. It does not contain executable code, hidden instructions, or requests for sensitive user data beyond what is typical for development tasks.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or API keys were detected. The provided code snippets correctly demonstrate using environment variables (e.g.,
process.env.STRIPE_SECRET_KEY) for secret management, which is a standard security best practice. - [EXTERNAL_DOWNLOADS]: The skill recommends several well-known and trusted third-party services (Stripe, Clerk, Supabase, Vercel, Railway, Resend, Sentry, and PostHog). These references are informative and point to legitimate industry-standard platforms.
- [COMMAND_EXECUTION]: The skill provides common development commands (e.g.,
prisma migrate deploy,stripe listen) that are standard for the described workflow. No arbitrary or high-risk command execution patterns were found. - [PROMPT_INJECTION]: No attempts to override system prompts or bypass safety guidelines were found. The instructional tone is standard for developer documentation.
Audit Metadata