Secure Code Review
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides best-practice instructions for security engineers and developers to perform manual code reviews. It includes specific guidance on identifying IDOR, SQL injection, SSRF, and unsafe deserialization.
- [SAFE]: The code snippets provided are illustrative examples of "Bad" vs. "Good" patterns to help the agent recognize insecure authorization logic.
- [SAFE]: The skill correctly identifies common pitfalls, such as relying on route-level middleware for authorization or using blocklists for sanitization, and instructs the agent to avoid them.
Audit Metadata