cpp-server

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill functions as a documentation resource for the SpacetimeDB C++ SDK. All provided macros, types, and logic patterns are consistent with the official SDK's intended use for deterministic database modules. No patterns of data exfiltration, credential harvesting, or unauthorized privilege escalation were detected.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing codebase content to generate database logic, which represents an attack surface for instructions embedded in source data. 1. Ingestion points: The agent ingests project source code based on the metadata globs for C++ files (**/.cpp, **/.h, **/*.hpp). 2. Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded content within the source files it processes. 3. Capability inventory: The skill provides instructions for performing database writes, updates, and deletes, as well as server-side logging. 4. Sanitization: The reference includes basic logical checks (e.g., verifying if a string is empty) but does not provide a systemic framework for sanitizing external inputs before database insertion.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:29 AM