zod
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content for a well-known, legitimate TypeScript validation library (Zod).
- [DATA_EXPOSURE]: No hardcoded credentials or sensitive file access patterns were detected. While the skill mentions validation for 'STRIPE_API_KEY' and 'DATABASE_URL', these are used as example schema fields for validation logic rather than actual secrets.
- [REMOTE_CODE_EXECUTION]: The skill correctly recommends standard installation of the 'zod' package via npm and does not include any suspicious remote script execution or unverifiable dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill serves as a defense against injection by teaching how to implement runtime validation boundaries for untrusted data (API requests, environment variables).
Audit Metadata