start-server-core

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a standard technical reference for a core library and does not include any malicious instructions or scripts.
  • [PROMPT_INJECTION]: The content consists solely of technical documentation and code examples without any attempt to override AI behavior or bypass safety filters.
  • [CREDENTIALS_UNSAFE]: The skill promotes secure practices by demonstrating the use of environment variables for secrets (e.g., process.env.SESSION_SECRET) rather than hardcoding sensitive data.
  • [REMOTE_CODE_EXECUTION]: No remote code execution vectors, such as piping network downloads to a shell or using dynamic evaluation of untrusted input, were found.
  • [DATA_EXFILTRATION]: The skill does not contain any logic for accessing sensitive system files or exfiltrating data to external domains.
  • [OBFUSCATION]: The code and documentation are transparent and do not utilize Base64 encoding, hidden Unicode characters, or homoglyphs to conceal malicious intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 08:02 AM