shared-security-auth-security
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a pattern library and educational resource for implementing application security best practices.
- [COMMAND_EXECUTION]: Includes a TypeScript example demonstrating the use of
child_process.execto runbun auditfor automated dependency scanning. The command is static and serves a defensive purpose. - [INDIRECT_PROMPT_INJECTION]: The skill addresses the risk of processing untrusted data by providing detailed patterns for sanitization using
DOMPurifyand framework auto-escaping to prevent XSS attacks. - [DYNAMIC_EXECUTION]: Utilizes the
child_processmodule in a documented example script intended for CI security checks, representing a controlled use of process execution.
Audit Metadata