nodejs-backend-skill

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard architectural guidance (Layered Architecture) and secure coding patterns for Node.js environments.
  • [SAFE]: Code snippets demonstrate the correct usage of security middleware such as helmet for HTTP headers, cors for cross-origin resource sharing, and express-rate-limit to mitigate brute-force and DoS attacks.
  • [SAFE]: The authentication examples correctly utilize bcrypt for password hashing and jsonwebtoken for stateless authentication, following secure implementation standards.
  • [SAFE]: SQL queries use parameterized inputs (e.g., $1, $2, $3) to prevent SQL injection vulnerabilities in the database repository layer.
  • [SAFE]: Input validation is enforced using the zod library to ensure data integrity before processing requests.
  • [SAFE]: Environment variables are correctly recommended for managing sensitive configurations like database credentials and JWT secrets, avoiding hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 02:03 AM
Security Audit — agent-trust-hub — nodejs-backend-skill