schema-best-practice
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were identified in the skill. The content is strictly limited to architectural documentation, coding standards, and TypeScript examples for schema-driven development.
- [PROMPT_INJECTION]: The instructions in
references/checklist.mdare task-specific guidelines for ensuring code compliance. They do not contain any patterns intended to bypass safety filters or override the agent's core safety protocols. - [EXTERNAL_DOWNLOADS]: The skill mentions the
zodpackage (specifically aliased aszod/v4). Zod is a standard, well-known validation library. No unauthorized external scripts, remote code execution, or suspicious downloads were found. - [DATA_EXFILTRATION]: No patterns of data harvesting, exfiltration, or unauthorized file access were detected. The examples explicitly advocate for proper input validation using Zod's
.parse()method, which is a security best practice.
Audit Metadata