using-backstage-backend-services
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and code examples for the Backstage framework. No malicious instructions, obfuscation, or unauthorized data access patterns were found.
- [EXTERNAL_DOWNLOADS]: The skill describes the use of
coreServices.urlReader, which allows Backstage plugins to fetch content from external source control systems (e.g., GitHub, GitLab). This is documented as a standard feature that utilizes centrally managed integrations. - [DATA_EXPOSURE]: Guidance is provided for using the
authandhttpAuthservices to manage credentials and authenticate requests. The patterns shown follow the framework's security model, using scoped credentials and encouraging the use of configuration schemas for environment-specific settings. - [COMMAND_EXECUTION]: Code snippets illustrate how to perform database migrations using the Knex library. These operations are performed within the context of a plugin-specific database schema, maintaining isolation between different backend components.
- [PROMPT_INJECTION]: The skill's instructions for determining which services to use are based on standard architectural patterns and do not contain directives designed to bypass safety filters or manipulate the model's behavior.
Audit Metadata