headless-bff-architecture
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes secure architectural patterns by requiring a server-side BFF layer to proxy sensitive API calls, ensuring that private credentials are never exposed to the browser.
- [SAFE]: The instructions provide explicit guidance on preventing common security vulnerabilities, including the improper storage of authentication cookies in localStorage and the use of client-side environment variables for sensitive keys.
- [SAFE]: All code examples provided for both 'correct' and 'wrong' implementations use clearly identifiable placeholders for API keys and JWT tokens, presenting no risk of credential exposure.
Audit Metadata