nodejs-backend-skill
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard architectural guidance (Layered Architecture) and secure coding patterns for Node.js environments.
- [SAFE]: Code snippets demonstrate the correct usage of security middleware such as
helmetfor HTTP headers,corsfor cross-origin resource sharing, andexpress-rate-limitto mitigate brute-force and DoS attacks. - [SAFE]: The authentication examples correctly utilize
bcryptfor password hashing andjsonwebtokenfor stateless authentication, following secure implementation standards. - [SAFE]: SQL queries use parameterized inputs (e.g.,
$1, $2, $3) to prevent SQL injection vulnerabilities in the database repository layer. - [SAFE]: Input validation is enforced using the
zodlibrary to ensure data integrity before processing requests. - [SAFE]: Environment variables are correctly recommended for managing sensitive configurations like database credentials and JWT secrets, avoiding hardcoded secrets.
Audit Metadata