mongodb-mongoose
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
mongooseand@types/mongoosepackages using thebunpackage manager. These are standard, well-known libraries for MongoDB object modeling in the Node.js ecosystem. - [PROMPT_INJECTION]: The skill implements data retrieval from an external MongoDB database, creating a surface for indirect prompt injection if the database contains untrusted content.
- Ingestion points: Data is fetched via
UserModelquery methods (e.g.,find,findOne,aggregate) inSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the code snippets.
- Capability inventory: The skill defines database interaction capabilities but does not include dangerous operations such as arbitrary command execution, file system writes, or unauthorized network exfiltration.
- Sanitization: The skill utilizes Mongoose schemas, which provide basic type validation and casting for data retrieved from the database.
Audit Metadata