qbcore-framework
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official documentation (
docs.qbcore.org) and the official GitHub repository for the QBCore Framework (github.com/qbcore-framework/qb-core). These are well-known, trusted resources within the FiveM development community. - [DATA_EXPOSURE]: The documentation specifically includes security best practices regarding sensitive information, explicitly instructing developers to keep API keys and webhooks in server-side configuration files to prevent them from being exposed to the client.
- [COMMAND_EXECUTION]: While the skill demonstrates framework-specific command registration (
QBCore.Commands.Add), these are standard methods for FiveM server administration and include permission checks (e.g., 'admin' group) as part of the demonstrated best practices. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a development assistant that processes user-provided Lua scripts. While this creates a surface for indirect injection if a user provides malicious code for analysis, the skill does not contain any inherent patterns that facilitate or encourage such attacks. The ingestion of user code is standard for its intended purpose of resource development.
Audit Metadata