ts-agent-sdk
Warn
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The database client template (
templates/db/client.ts) usesexecSyncto runnpx wrangler d1 execute. While it attempts to escape SQL inputs, the command construction uses variables derived from environment configurations (databaseName,finalSql), which could lead to command injection if these environment variables are maliciously manipulated. - [EXTERNAL_DOWNLOADS]: The skill templates include built-in clients for several external services. It makes network requests to
generativelanguage.googleapis.com(Gemini),api.cloudflare.com(Workers AI/D1),date.nager.at(Public Holidays API), and supports generic webhooks ton8n.cloud,zapier.com, andmake.com. - [CREDENTIALS_UNSAFE]: The SDK templates are designed to handle and require multiple sensitive credentials via environment variables, including
SDK_API_TOKEN,SDK_GEMINI_API_KEY,SDK_CF_API_TOKEN, andSDK_SLACK_WEBHOOK_URL. While the skill correctly advises using environment variables rather than hardcoding, the aggregation of these secrets in a single generated SDK increases the impact of potential data exposure. - [DYNAMIC_EXECUTION]: The database client implementation for local mode (
executeLocalRaw) dynamically constructs and executes shell commands vianpx wranglerbased on runtime SQL parameters.
Audit Metadata