security-and-hardening
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a defensive coding manual for web developers. It correctly identifies trust boundaries and assets, and applies the STRIDE threat modeling framework to secure application logic.
- [SAFE]: Code examples demonstrate legitimate security practices, such as using parameterized queries to prevent SQL injection, sanitizing HTML with DOMPurify to prevent XSS, and resolving DNS safely to prevent SSRF.
- [SAFE]: The instructions emphasize secret management best practices, advising against committing
.envfiles and providing specific.gitignorepatterns to prevent credential exposure. - [SAFE]: The skill addresses supply chain security by instructing the agent to triage dependency audits based on reachability and to review new dependencies for provenance and typosquatting.
Audit Metadata