faasjs-best-practices
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFE
Full Analysis
- SAFE (SAFE): The skill is entirely instructional and does not include any executable code, scripts, or automation logic. Its content focuses on architectural patterns and coding standards.\n- DATA_EXPOSURE (SAFE): No sensitive file paths, credentials, or network exfiltration patterns were detected.\n- REMOTE_CODE_EXECUTION (SAFE): No remote script downloads or dynamic execution patterns (like eval or subprocess) are present. The mentioned npm packages (@faasjs/func, @faasjs/server, @faasjs/knex) are standard framework dependencies.\n- PROMPT_INJECTION (SAFE): The instructions are purely technical guidelines for code generation and do not contain attempts to bypass AI safety filters or override system prompts.\n- SQL_INJECTION_PREVENTION (BEST PRACTICE): The 'knex.md' file specifically instructs the user/agent to avoid SQL injection by using query builders and parameter bindings, which is a positive security indicator.
Audit Metadata