fastify
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is an educational resource for the Fastify web framework. It contains detailed documentation on server configuration, request lifecycle, and security features like prototype poisoning protection and log redaction. It explicitly warns developers about risks such as schema injection and Denial of Service (DoS) vectors in validation logic.- [PROMPT_INJECTION]: No malicious instructions, bypass attempts, or role-play markers were detected within the skill's body or metadata.- [REMOTE_CODE_EXECUTION]: No patterns for remote script execution or unauthorized code execution (e.g., curl pipes to shell) were found. The skill emphasizes the use of official and well-known ecosystem packages.- [DATA_EXFILTRATION]: No evidence of hardcoded credentials or unauthorized network exfiltration. Example code uses standard documentation placeholders like 'supersecret' for JWT configuration and 'example.com' for external endpoints.- [COMMAND_EXECUTION]: No arbitrary command execution patterns. File operations described (e.g., reading certificates or piping streams) are standard for web server development.
Audit Metadata