backend
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a collection of instructional guidelines and checklists designed to ensure backend code correctness and security. It does not include any executable scripts, binary files, or external dependencies.\n- [CREDENTIALS_UNSAFE]: The instructions promote secure credential handling by explicitly directing the agent to ensure tokens, passwords, and PII are kept out of log files and that passwords use modern, secure hashing algorithms like argon2id or bcrypt.\n- [INDIRECT_PROMPT_INJECTION]: The skill mitigates common injection risks by requiring the agent to implement validation for every input crossing a trust boundary, such as HTTP bodies, headers, and webhook payloads.
Audit Metadata