skills/terminalskills/skills/express/Gen Agent Trust Hub

express

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes standard shell commands for project initialization and package management (npm init, npm install express). These are necessary for the development workflow and do not involve suspicious or obfuscated execution patterns.
  • [DATA_EXPOSURE]: The instructions correctly advise against hardcoding secrets, explicitly suggesting the use of environment variables (process.env.INVENTORY_API_KEY) for sensitive information. It also provides guidance on limiting static file exposure and suppressing server identification headers.
  • [EXTERNAL_DOWNLOADS]: The skill references the official express package from the standard npm registry. These are well-known and trusted dependencies for Node.js development.
  • [PROMPT_INJECTION]: The content focuses strictly on technical implementation and does not contain instructions that attempt to override AI safety guidelines or manipulate agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 09:30 AM