event-store-design
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The Python and SQL templates included in the skill demonstrate secure database interactions. The PostgreSQL implementation correctly utilizes parameterized queries (e.g.,
WHERE stream_id = $1) to prevent SQL injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill mentions and provides examples for standard, well-known libraries including
asyncpg,boto3, andesdbclient. No unauthorized or suspicious remote scripts or binary downloads are present. - [CREDENTIALS_UNSAFE]: Analysis of the code templates and documentation found no hardcoded API keys, passwords, or other sensitive credentials. Connection strings use standard local examples (e.g.,
esdb://localhost:2113). - [PROMPT_INJECTION]: The skill's instructions are purely focused on its stated purpose of event store design. There are no attempts to manipulate agent behavior, override system instructions, or exfiltrate configuration.
- [DATA_EXFILTRATION]: There are no patterns suggesting unauthorized data access or transmission to external domains. The network operations described are limited to standard database connections within the user's infrastructure.
Audit Metadata