db-platform-fit

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses the WebFetch tool to access vendor-published documentation for version and pricing pages. This is used for verification purposes to ensure the agent does not fabricate data. Known platforms mentioned (Supabase, Neon, Vercel/PlanetScale, Cloudflare) are well-known services and their domains are considered safe for fetching configuration and documentation.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard database introspection queries (e.g., SELECT version(), PRAGMA foreign_keys). These commands are intended to run against the user's configured $DATABASE_URL to verify platform features. No arbitrary or malicious command execution patterns were detected.
  • [DATA_EXFILTRATION]: No patterns of sensitive data exfiltration were found. The skill explicitly instructs the agent to redact secrets from observed evidence and limits data collection to database metadata (versions, constraint existence, RLS status).
  • [PROMPT_INJECTION]: The instructions do not contain attempts to override agent behavior or bypass safety filters. On the contrary, the skill contains strong negative constraints preventing the agent from fabricating data (EOL dates, prices, or quotas), which enhances the reliability and safety of the output.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 10:01 PM
Security Audit — agent-trust-hub — db-platform-fit