velt-node-sdk-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical implementation guide for the
@veltdev/nodeSDK, providing valid code patterns for both REST-based and self-hosted backends. - [SAFE]: Promotes security best practices by instructing users to store sensitive credentials like
VELT_API_KEYandVELT_AUTH_TOKENin environment variables rather than hardcoding them. - [SAFE]: Includes specific guidance on data sanitization using a 'Field Allowlist' feature (
filterUnknownFields), which helps prevent unintended data writes to the Velt backend. - [SAFE]: No instances of prompt injection, obfuscation, or unauthorized data exfiltration were found. The use of peer dependencies like
mongodband@aws-sdk/client-s3is consistent with the skill's stated purpose of supporting self-hosted storage and attachments.
Audit Metadata