salvo-database
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation resource for the Salvo web framework. All code snippets provided are standard Rust implementations for database connectivity.
- [COMMAND_EXECUTION]: The provided code examples demonstrate secure database interaction patterns. The SQLx implementation correctly uses parameterized queries (e.g.,
query(...).bind(...)) to handle user-supplied data, which prevents SQL injection. - [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted input from HTTP request parameters and JSON bodies. It properly mitigates injection risks by utilizing Rust's strong type system (e.g., parsing IDs as
i64) and employing safe database abstraction layers like SeaORM and Diesel. - [CREDENTIALS_UNSAFE]: The database connection strings included in the examples (e.g.,
postgres://user:pass@localhost/db) use generic, well-known placeholders for local development and do not contain actual sensitive credentials.
Audit Metadata