dbos-typescript
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill contains only technical implementation guidelines and does not attempt to override system prompts or bypass safety filters. All instructions are focused on the documented use of the DBOS SDK.- [EXTERNAL_DOWNLOADS]: The skill recommends installing official dependencies from the '@dbos-inc' organization via npm. These are legitimate resources provided by the vendor of the framework being documented.- [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables for sensitive connection strings (e.g., 'DBOS_SYSTEM_DATABASE_URL') instead of hardcoding secrets in source files.- [DATA_EXFILTRATION]: No unauthorized data transmission patterns were found. Network calls shown in examples (like 'fetch') are used to demonstrate how to perform external operations within durable execution steps.- [COMMAND_EXECUTION]: No arbitrary command execution patterns were found. The 'npm install' commands are standard for framework setup, and SQL operations described are limited to integration test setup functions.- [PERSISTENCE_MECHANISMS]: The skill describes application-level scheduled workflows ('DBOS.registerScheduled'), which is a core feature for task scheduling within the framework and does not constitute a malicious host-level persistence mechanism.- [SAFE]: The skill effectively teaches developers how to build resilient applications using checkpointed steps and transactions, which enhances the overall reliability and predictability of the code.
Audit Metadata