db-core/custom-adapter

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides templates for using fetch and WebSockets to interact with remote service endpoints. These network operations are used exclusively to synchronize database records between the local environment and a backend, which is the primary and expected function of a custom adapter.
  • [INDIRECT_PROMPT_INJECTION]: The implementation patterns facilitate the ingestion of data from external network sources into a local database. While this represents a surface for ingesting untrusted content, the skill follows standard data processing practices (such as JSON parsing) and limits its scope to database state management.
  • Ingestion points: Network responses from fetch and real-time events from WebSocket subscriptions in SKILL.md.
  • Boundary markers: None explicitly provided for LLM context delimitation, as the data is intended for database storage.
  • Capability inventory: Network access (fetch, WebSockets) and local database writes (begin, write, commit).
  • Sanitization: Uses standard res.json() and JSON.stringify() for data handling.
  • [COMMAND_EXECUTION]: The code examples utilize library-specific database primitives to manage record insertion, updates, and deletions. These operations are restricted to the database context and do not involve shell command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 05:42 AM