typeorm-dev
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill provides architectural guidance and coding standards for TypeORM development.
- [SAFE]: The skill explicitly promotes security best practices, including:
- Prevention of SQL injection by mandating the use of parameterized queries in QueryBuilder.
- Protection of sensitive data by recommending the use of
select: falsefor columns like passwords in TypeORM entities. - Secure logging practices by requiring the masking of sensitive information such as passwords, emails, and API keys.
- Secure secret management by prohibiting hardcoded credentials and recommending environment variables.
- [SAFE]: The skill references internal packages under the
@sellernote/namespace, which corresponds to the vendor name ('sellernote') and is considered legitimate vendor resource usage.
Audit Metadata