skills/vanducng/skills/fastreact/Gen Agent Trust Hub

fastreact

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows security best practices for secret management by providing a .env.example template and instructing the user to keep sensitive credentials in a gitignored .env file.
  • [SAFE]: The deployment documentation outlines a secure AWS architecture using IAM instance roles, OIDC for CI/CD, and private subnets, explicitly avoiding insecure practices like long-lived access keys or open SSH ports.
  • [SAFE]: All dependencies specified in the generated pyproject.toml and package.json files are standard, reputable libraries from official package registries (PyPI and NPM).
  • [SAFE]: The scaffold.sh script is a standard file-generation utility that performs project bootstrapping without requesting elevated system privileges or executing code from untrusted remote sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 01:04 PM