express-api-development
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious override or bypass instructions detected in SKILL.md or associated files. The instructions focus on architectural guidance and operational standards for Node.js services.\n- [DATA_EXFILTRATION]: No network operations or access to sensitive file paths (like .env, credentials, or ssh keys) identified. The JS template uses standard request handling without external data transmission.\n- [COMMAND_EXECUTION]: No execution of arbitrary shell commands or dangerous subprocess calls. The included JavaScript template uses standard Express.js routing patterns.\n- [REMOTE_CODE_EXECUTION]: No remote scripts are downloaded or executed. Dependencies are limited to standard, well-known libraries like 'express'.\n- [EXTERNAL_DOWNLOADS]: No external downloads or remote resources are referenced. All guidance and assets are contained within the local skill files.\n- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or secrets were found in the templates or configuration files.\n- [SAFE]: The skill promotes security best practices, such as ensuring authentication and authorization middleware are executed before route handlers and performing input validation.
Audit Metadata