skills/nocobase/skills/nocobase-utils/Gen Agent Trust Hub

nocobase-utils

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference library for NocoBase utilities. It contains comprehensive documentation on filter condition structures, operator allowlists, and expression engines (formula.js and math.js). All provided instructions are designed to ensure the agent produces syntactically correct and platform-compatible configurations.
  • [SAFE]: The utility script scripts/uid.js is a zero-dependency JavaScript file used to generate non-cryptographic short UIDs. It uses Math.random() and basic string manipulation. The input parsing for the length argument is handled safely via Number.parseInt(), preventing command injection risks.
  • [SAFE]: No patterns associated with prompt injection, data exfiltration, obfuscation, or unauthorized privilege escalation were detected. The skill instructions reinforce safety by advising the agent not to use the UID generator for security-sensitive tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:46 PM
Security Audit — agent-trust-hub — nocobase-utils