api-baas-appwrite
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows established security best practices for backend-as-a-service integrations. It explicitly mandates the use of environment variables for configuration and warns against hardcoding sensitive credentials.
- [CREDENTIALS_SAFE]: The documentation correctly identifies the risk of exposing API keys in client bundles. It instructs users to use the server SDK (
node-appwrite) with API key authentication only on the backend and session-based authentication on the client. - [COMMAND_EXECUTION]: The skill provides standard, well-known CLI commands for project initialization and deployment using the official
appwrite-cli. These are legitimate developer tools and do not involve suspicious execution strings or remote script piping (e.g., curl | bash). - [DATA_EXPOSURE_EXFILTRATION]: No unauthorized data access or exfiltration patterns were identified. The network operations described are limited to standard interactions with the Appwrite API endpoints.
Audit Metadata