z-security-hardening
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no executable code or scripts. It is a set of instructional documents providing security guidance for developers and AI agents.
- [INDIRECT_PROMPT_INJECTION]: The instructions explicitly address indirect prompt injection as a risk factor. It provides appropriate mitigation strategies, including treating model output as untrusted input and enforcing authorization checks in code rather than relying on system prompts.
- [CREDENTIALS_UNSAFE]: The skill follows secret management best practices by instructing users to use
.env.exampleplaceholders and gitignore real environment files. It specifically warns against hardcoding secrets in version control. - [EXTERNAL_DOWNLOADS]: The skill contains a reference to a GitHub repository (
github.com/addyosmani/agent-skills) for attribution purposes. This is a reference to a well-known developer resource and does not involve automated execution or risky downloads.
Audit Metadata