backend-development
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality educational content and implementation guidelines for backend technologies including Node.js, Python, Go, and Rust. It emphasizes security best practices such as Argon2id password hashing, parameterized queries to prevent SQL injection, and OAuth 2.1 implementation.
- [PROMPT_INJECTION]: No malicious prompt injection or behavior override instructions were found. The 'Avoid over-engineering' section in SKILL.md is a standard development guideline rather than a security bypass.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets or sensitive credentials were detected. Code examples use environment variable placeholders (e.g.,
process.env.JWT_PRIVATE_KEY) or standard testing secrets for localized development tools. - [DATA_EXFILTRATION]: No suspicious network requests or data collection patterns were found. Network-related examples (like Axios or Fetch) are used in legitimate contexts for API communication or authentication flows.
- [EXTERNAL_DOWNLOADS]: All external references point to trusted documentation sites (OWASP, OAuth.net, etc.). There are no automated downloads of executable scripts or remote payloads.
Audit Metadata