networking-and-server-state
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Centralized Network Architecture. The skill mandates that all network calls occur through a single ApiClient transport in src/api/fetch-api-client.ts. This approach centralizes security controls such as timeouts, authentication headers, and privacy inventories.\n- [SAFE]: Mandatory Transport Security. The parseApiBaseUrl function ensures that API endpoints use HTTPS in all release variants, preventing cleartext data transmission in production environments.\n- [SAFE]: Robust Data Validation. The requirement to use Valibot schemas for all API responses ensures that external data is strictly validated and typed before entering the application state, protecting against malformed payloads and indirect injection surface.\n- [SAFE]: Secure Test Environment. The skill includes tools to verify that tests use appropriate mocks and do not reach the real network or leak state between test cases.
Audit Metadata