ts-mongodb
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard practices for MongoDB integration using Mongoose and the native Node.js driver, including schema definition and Zod validation.
- [SAFE]: The skill describes an attack surface for indirect prompt injection via data ingestion but implements robust mitigations: Ingestion points: The createUser function in db/users.ts receives untrusted UserInput; Boundary markers: The repository/user.repository.ts file implements a toDomain mapper to isolate database driver types from application logic; Capability inventory: The skill demonstrates standard database operations including insertOne, findOne, and watch; Sanitization: The code explicitly uses userSchema.parse(input) via Zod to validate data before execution.
- [SAFE]: Connection management utilizes environment variables (process.env.MONGODB_URI) rather than hardcoded credentials, adhering to security best practices for secret management.
- [SAFE]: The skill uses well-known, industry-standard libraries (mongoose, mongodb, zod) for its implementation examples.
Audit Metadata