appwrite-go
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Appwrite Go SDK from its official GitHub repository (
github.com/appwrite/sdk-for-go). This is a legitimate vendor resource. - [CREDENTIALS_SAFE]: Code examples correctly demonstrate using environment variables (
os.Getenv) to handle sensitive credentials likeAPPWRITE_API_KEYandAPPWRITE_PROJECT_ID, avoiding hardcoded secrets. - [SAFE_PRACTICES]: The Server-Side Rendering (SSR) and authentication examples explicitly guide the developer to use secure cookie attributes, including
HttpOnly,Secure, andSameSiteStrictMode, which are critical for preventing XSS and session hijacking. - [INDIRECT_PROMPT_INJECTION]: While the skill manages external data (database rows and file uploads), it does not involve the direct interpolation of untrusted content into agent prompts. The attack surface is typical for a database and storage SDK and does not introduce specific vulnerabilities.
Audit Metadata