fullstack-guide
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns, suspicious downloads, or automatic script execution were detected in the skill instructions or resource files.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, secrets, or sensitive credentials were found. The documentation correctly advises using environment variables and hooks for authentication management.
- [PROMPT_INJECTION]: The skill does not contain any instructions aimed at overriding agent behavior, bypassing safety filters, or extracting system prompts.
- [DATA_EXFILTRATION]: There are no suspicious network operations or patterns associated with sensitive data access and transmission to untrusted domains.
- [OBFUSCATION]: The content is clear and readable. No hidden characters, Base64-encoded commands, homoglyph attacks, or concealed URLs were identified.
- [PRIVILEGE_ESCALATION]: No commands for acquiring elevated permissions, such as sudo, or modifying system configuration files were found.
- [PERSISTENCE]: The skill does not attempt to create persistence via cron jobs, shell profiles, or startup services.
- [DYNAMIC_EXECUTION]: The skill contains standard code snippets for educational purposes and does not utilize eval(), exec(), or unsafe deserialization of untrusted data.
Audit Metadata