waitlist

Pass

Audited by Gen Agent Trust Hub on Jul 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill focuses on scaffolding boilerplate code for a common web application feature. The logic for database schema creation, API routes, and frontend components is standard and does not include any malicious behavior.
  • [COMMAND_EXECUTION]: Uses a safe, read-only command (cat piped to grep) to inspect the project's package.json for environment detection during the setup phase.
  • [DATA_EXPOSURE]: No hardcoded credentials or sensitive data exposure was found. The skill correctly demonstrates using environment variables (RESEND_API_KEY, ADMIN_SECRET) for managing secrets.
  • [DYNAMIC_EXECUTION]: A dynamic require call is used for the built-in Node.js crypto module. Since the module name is a static string, this is a safe and standard pattern in JavaScript environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 27, 2026, 08:47 AM
Security Audit — agent-trust-hub — waitlist