electric-proxy-auth
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, focusing on security best practices for proxying database sync requests.
- [SAFE]: Provides proactive warnings against SQL injection by recommending positional parameters ($1, $2) instead of string interpolation.
- [SAFE]: Correctly identifies the risk of over-forwarding query parameters and provides a whitelist-based sanitization logic using
ELECTRIC_PROTOCOL_QUERY_PARAMS. - [SAFE]: Emphasizes the importance of keeping
ELECTRIC_SECRETandSOURCE_SECRETon the server-side to prevent credential exposure. - [EXTERNAL_DOWNLOADS]: Mentions the
@electric-sql/clientnpm package and references official documentation/source files from theelectric-sqlGitHub organization, which are legitimate developer resources.
Audit Metadata