db-core/collection-setup
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill uses browser 'localStorage' for persisting application state. This is a legitimate use of standard web APIs and does not involve accessing sensitive system files or credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill handles data ingestion from external APIs and sync adapters. It employs synchronous schema validation using Zod and other StandardSchema libraries as a boundary to validate and sanitize incoming data, mitigating potential injection risks.
Audit Metadata