nodejs-backend-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements and recommends industry-standard security practices for Node.js backends.
- Secret Management: Correctly uses
process.envfor sensitive information such as database credentials and JWT secrets. - Security Middleware: Includes implementations for
helmet(security headers),cors(cross-origin resource sharing), andexpress-rate-limit(denial-of-service protection). - Data Validation: Demonstrates the use of
ZodandFastifyschemas to validate and sanitize incoming user data, mitigating injection risks. - Authentication: Follows best practices for password security using
bcryptand implements a standard JWT flow with short-lived access tokens and refresh tokens. - Dependencies: All referenced Node.js packages (
pg,mongoose,express,fastify,pino, etc.) are well-known, widely-used, and appropriate for the stated purpose of the skill.
Audit Metadata