zenstack-v3
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource for ZenStack v3, providing technical guidance for using its schema language and ORM API.
- [EXTERNAL_DOWNLOADS]: The skill instructions involve installing official ZenStack packages (@zenstackhq/schema, @zenstackhq/orm, @zenstackhq/cli) and common database drivers (pg, mysql2, better-sqlite3) from the public npm registry.
- [COMMAND_EXECUTION]: The provided CLI commands (e.g., zen generate, zen migrate) are standard development tools associated with the ORM's code generation and migration workflows.
- [DATA_EXFILTRATION]: No patterns for exfiltrating sensitive data or credentials were found. The skill correctly recommends using environment variables for database URLs.
- [OBFUSCATION]: The skill contains no obfuscated content, encoded strings, or hidden instructions.
- [DYNAMIC_EXECUTION]: Code generation via 'zen generate' is a standard build-time process for TypeScript ORMs and does not involve unsafe runtime execution of untrusted data.
Audit Metadata