security-best-practices
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is educational, providing instructions and templates for securing web applications. It does not include any functional scripts that execute commands or access files on the host system.
- [CREDENTIALS_UNSAFE]: The documentation includes example environment variables and Kubernetes secrets (e.g., DATABASE_URL, STRIPE_SECRET_KEY). These use obvious placeholders such as 'sk_test_xxx' and 'your-super-secret' for demonstration purposes and do not represent a credential leak.
Audit Metadata