spacetimedb-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation, rule files, and code examples designed to guide AI agents in generating or reviewing SpacetimeDB code. All analyzed files contain legitimate technical guidance and benign code snippets.
- [REMOTE_CODE_EXECUTION]: No remote code execution or suspicious download patterns were identified. The repository mentions standard build tools (pnpm) and official package registries which are consistent with the development purpose.
- [DATA_EXFILTRATION]: There are no patterns suggesting data exfiltration or the unauthorized collection of sensitive information. The code examples use local websocket connections (ws://localhost:3000) for demonstration.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or private tokens were found. The documentation correctly advises using identity-based primary keys and session management through standard SDK patterns.
- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override the AI agent's safety protocols or core behavioral constraints.
Audit Metadata