btst-backend-plugin-dev
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides developer documentation and code templates for a specific monorepo environment. All referenced internal packages (e.g.,
@btst/stack,@btst/db) are consistent with the vendor's infrastructure. - [PRIVILEGE_ESCALATION]: The documentation describes an architectural pattern using a
trustedaccessor (myStack.trusted) to execute operations without standard request-based authorization. This is a design feature for internal execution contexts, such as background jobs or AI tool execution, rather than an unauthorized bypass. - [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points where AI tools process user parameters to trigger database operations. The instructions specifically mitigate this risk by requiring input validation and authoritative fact-checking within the
operations.tslayer.
Audit Metadata