express
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes standard shell commands for project initialization and package management (
npm init,npm install express). These are necessary for the development workflow and do not involve suspicious or obfuscated execution patterns. - [DATA_EXPOSURE]: The instructions correctly advise against hardcoding secrets, explicitly suggesting the use of environment variables (
process.env.INVENTORY_API_KEY) for sensitive information. It also provides guidance on limiting static file exposure and suppressing server identification headers. - [EXTERNAL_DOWNLOADS]: The skill references the official
expresspackage from the standard npm registry. These are well-known and trusted dependencies for Node.js development. - [PROMPT_INJECTION]: The content focuses strictly on technical implementation and does not contain instructions that attempt to override AI safety guidelines or manipulate agent behavior.
Audit Metadata