add-resource-command
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes instructions for security best practices:
- Input Validation: Mandatory use of Zod schemas for all API responses and inputs to ensure data integrity.
- Data Sanitization: Explicit instruction to use
encodeURIComponentfor all string path parameters to prevent injection attacks. - Credential Security: Specific warnings against passing API keys via command-line arguments, recommending environment variables or stdin instead.
- Output Control: Mandatory use of
.strip()in Zod schemas for compact views to prevent accidental leakage of sensitive internal fields from the API. - [COMMAND_EXECUTION]: The skill references several shell commands for development workflows (e.g.,
ls,rg,bun run check,bun run test:e2e). These are standard tools for project maintenance and testing within the Metabase development environment and do not pose a security risk in this context.
Audit Metadata