secure-code-guardian
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The instructions are educational and focused on security implementation. There are no attempts to override agent behavior, bypass safety filters, or extract system prompts.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets or credentials were found. All code examples correctly demonstrate the use of environment variables for sensitive data like JWT secrets and database connection strings.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or unauthorized package installations. It provides examples using standard, well-known libraries.
- [COMMAND_EXECUTION]: The skill correctly warns against unsafe command execution (e.g., using
execwith user input) and recommends safer alternatives likeexecFileor library functions. - [DATA_EXFILTRATION]: No network operations or patterns involving the access and transmission of sensitive data were identified.
Audit Metadata