kstack-layerd-architecture

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides architectural guidelines for organizing TypeScript code into layers (client, repository, use case, service, utils). These guidelines include best practices for credential encapsulation, error handling, and separation of concerns.
  • [CREDENTIALS_UNSAFE]: The skill explicitly instructs users to avoid passing sensitive information like API keys as method arguments. Instead, it recommends encapsulating them within class constructors and handling them internally within the client layer, which is a recognized security best practice for reducing credential exposure.
  • [COMMAND_EXECUTION]: The provided code examples demonstrate standard network operations using the fetch API for external service integration. These are documented as part of the intended client layer responsibility and do not show signs of malicious exfiltration or command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 12:36 PM