kotlin-exposed-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a comprehensive documentation and template repository for JetBrains Exposed ORM, HikariCP, and Flyway. It promotes secure coding standards.
- [EXTERNAL_DOWNLOADS]: The skill lists standard Gradle dependencies for Kotlin development, all targeting well-known and reputable organizations including JetBrains, PostgreSQL, and Flyway. These are standard library references for the described functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing user-supplied data in database queries. It specifically includes an
escapeLikePatternfunction to sanitize input used in SQLLIKEclauses, which prevents users from injecting wildcards to bypass search logic or trigger unintended data matching. This demonstrates proactive security awareness. - [CREDENTIALS_UNSAFE]: Database configuration examples correctly use property-based access and variables (e.g.,
config.password) rather than hardcoding sensitive credentials. The instructions recommend using environment configuration files, which is a standard security best practice for secret management.
Audit Metadata