api-baas-appwrite
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill demonstrates patterns for ingesting untrusted data through request objects (e.g.,
req.bodyJsonin serverless functions) and writing that data to a database. This identifies an indirect prompt injection surface where stored instructions could later influence agent behavior. - Ingestion points:
req.bodyJsonandreq.bodyTextinexamples/functions.md. - Boundary markers: Absent from documentation examples.
- Capability inventory: Data persistence operations via
tablesDB.createRow,storage.createFile, andaccount.create. - Sanitization: Not explicitly demonstrated in the provided code snippets.
- [EXTERNAL_DOWNLOADS]: The skill references official integration tools including the
appwriteandnode-appwriteSDKs and theappwrite-clifor project management. These are standard resources for the platform.
Audit Metadata