ts-mongodb

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents standard practices for MongoDB integration using Mongoose and the native Node.js driver, including schema definition and Zod validation.
  • [SAFE]: The skill describes an attack surface for indirect prompt injection via data ingestion but implements robust mitigations: Ingestion points: The createUser function in db/users.ts receives untrusted UserInput; Boundary markers: The repository/user.repository.ts file implements a toDomain mapper to isolate database driver types from application logic; Capability inventory: The skill demonstrates standard database operations including insertOne, findOne, and watch; Sanitization: The code explicitly uses userSchema.parse(input) via Zod to validate data before execution.
  • [SAFE]: Connection management utilizes environment variables (process.env.MONGODB_URI) rather than hardcoded credentials, adhering to security best practices for secret management.
  • [SAFE]: The skill uses well-known, industry-standard libraries (mongoose, mongodb, zod) for its implementation examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 09:41 AM
Security Audit — agent-trust-hub — ts-mongodb