backend-transactional-outbox

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill contains example command-line operations for database migrations (npx prisma migrate deploy), Kubernetes deployments (kubectl apply), and Kafka interaction (kafka-console-consumer). These are documented as deployment examples and do not execute automatically.
  • [EXTERNAL_DOWNLOADS]: The skill references standard Docker images (e.g., debezium/connect:2.7) and mentions external services like Kafka and PostgreSQL. These are well-known infrastructure components used within the context of the Outbox pattern.
  • [CREDENTIALS_UNSAFE]: The documentation uses standard placeholders for secrets (e.g., "database.password": "***" and ${DB_PASSWORD}). It correctly identifies credentials as sensitive and suggests standard secret management practices (Kubernetes secrets, .env files).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 08:00 PM
Security Audit — agent-trust-hub — backend-transactional-outbox