security-defensive-programming
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security-focused instruction manual for the AI agent. It contains no executable code, remote downloads, or obfuscation techniques.
- [SAFE]: The instructions promote defensive programming principles including input validation (allowlisting), output encoding (parameterised queries, auto-escaping), and secure error handling (failing closed, masking internal details).
- [SAFE]: The skill explicitly warns against common security anti-patterns like hardcoding secrets, trusting client-side validation, and using unsafe dynamic execution functions like eval().
Audit Metadata