full-stack
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Data Exposure & Exfiltration] (SAFE): The 'Non-Negotiable Rules' section specifies using an 'api_key=' parameter for API keys. This is a best-practice violation as passing credentials in parameters can lead to exposure in server logs or browser history.
- [Command Execution] (SAFE): Standard development commands such as 'npm run lint' and 'npm run format' are referenced as part of the frontend workflow; these are benign in this context.
Audit Metadata