appsmith
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructions for deploying and using Appsmith v2.4. All identified external resources, including Docker images (docker.io/appsmith/*) and Helm repositories (helm.appsmith.com), are official sources for the platform and are considered safe.
- [SAFE]: The code examples for SQL queries and JavaScript objects (JSObjects) follow standard platform patterns. The skill proactively addresses security risks by instructing users to keep 'Prepared Statements' enabled for SQL-injection defense and advising that credentials must stay in datasources rather than being hardcoded in application logic.
- [SAFE]: Command-line examples for Docker and Kubernetes (Helm) are standard administrative operations for self-hosting. No suspicious shell patterns, persistence mechanisms, or unauthorized privilege escalation attempts were found.
- [SAFE]: Although the platform ingests user input via UI widgets (e.g., SearchInput, Select), the skill provides clear guidance on using parameter bindings and prepared statements to sanitize this data before it reaches the backend, effectively mitigating injection risks.
Audit Metadata