pocketbase
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The file acts as a documentation resource and developer cheatsheet for the PocketBase framework, containing instructions and code examples for application development.
- [SAFE]: Includes proactive security guidance, such as warning against using user-controlled query parameters for authorization (Section 3.2) and mandating the use of parameter binding to prevent SQL/filter injection (Sections 5.5 and 10.12).
- [SAFE]: Recommends standard security practices for production, including the use of environment variables for encryption keys and SMTP credentials, rate limiting, and reverse proxy configurations (Section 9).
- [SAFE]: References established and reputable software repositories within the PocketBase and Go ecosystems, such as github.com/pocketbase/pocketbase and ncruces/go-sqlite3.
Audit Metadata