mongodb-mongoose

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the mongoose and @types/mongoose packages using the bun package manager. These are standard, well-known libraries for MongoDB object modeling in the Node.js ecosystem.
  • [PROMPT_INJECTION]: The skill implements data retrieval from an external MongoDB database, creating a surface for indirect prompt injection if the database contains untrusted content.
  • Ingestion points: Data is fetched via UserModel query methods (e.g., find, findOne, aggregate) in SKILL.md.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the code snippets.
  • Capability inventory: The skill defines database interaction capabilities but does not include dangerous operations such as arbitrary command execution, file system writes, or unauthorized network exfiltration.
  • Sanitization: The skill utilizes Mongoose schemas, which provide basic type validation and casting for data retrieved from the database.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 03:23 AM
Security Audit — agent-trust-hub — mongodb-mongoose