ecto-nested-associations

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides boilerplate code and best practices for Ecto schemas, migrations, and transactions. It includes standard patterns for association management and database integrity. No network operations, sensitive file system access, or hardcoded credentials were identified in the content.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing external data, which represents a potential attack surface.\n
  • Ingestion points: Changeset functions in SKILL.md (e.g., MyApp.Blog.Post.changeset) take an attrs argument representing external user input.\n
  • Boundary markers: Use of Ecto's cast/3 creates a whitelist boundary for accepted data, mitigating mass assignment risks.\n
  • Capability inventory: Database write capabilities are documented via Repo.update and Repo.transaction calls in SKILL.md.\n
  • Sanitization: Data is sanitized and validated via Ecto's cast, validate_required, and validate_format functions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:44 AM