nocobase-utils
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference library for NocoBase utilities. It contains comprehensive documentation on filter condition structures, operator allowlists, and expression engines (formula.js and math.js). All provided instructions are designed to ensure the agent produces syntactically correct and platform-compatible configurations.
- [SAFE]: The utility script
scripts/uid.jsis a zero-dependency JavaScript file used to generate non-cryptographic short UIDs. It usesMath.random()and basic string manipulation. The input parsing for the length argument is handled safely viaNumber.parseInt(), preventing command injection risks. - [SAFE]: No patterns associated with prompt injection, data exfiltration, obfuscation, or unauthorized privilege escalation were detected. The skill instructions reinforce safety by advising the agent not to use the UID generator for security-sensitive tokens.
Audit Metadata