health-check-endpoints
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The Express.js implementation uses child_process.execSync to run the df command for disk monitoring. While the command is static, using shell execution in application code increases the attack surface.
- [DATA_EXFILTRATION]: The provided examples return raw exception messages (e.g., error.message) in the health check responses. This could lead to sensitive information disclosure regarding internal infrastructure if errors occur.
Audit Metadata