api-database-mongoose
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational documentation and code patterns for Mongoose. No malicious commands, obfuscated payloads, or safety bypass instructions were found.
- [CREDENTIALS_UNSAFE]: The skill demonstrates secure practices by using environment variables for connection strings. It explicitly identifies hardcoded credentials as a 'Bad Example' to be avoided.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing data from MongoDB. While this involves ingesting external data, the risk is addressed through schema validation and typed models. Ingestion points: CRUD operations in core.md and population.md. Boundary markers: The skill emphasizes field selection and schema constraints. Capability inventory: Database CRUD operations; no OS-level execution or external network operations identified. Sanitization: Extensive use of Mongoose validation constraints.
Audit Metadata