api-database-surrealdb
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted user input within database queries, which is a potential injection surface. The instructions explicitly mandate the use of parameterized queries ($variables) and the RecordId class to effectively mitigate SurrealQL injection risks.
- [CREDENTIALS_SAFE]: The documentation adheres to security best practices by recommending environment variables for secret management and utilizing strong cryptographic hashing (Argon2) for password storage.
Audit Metadata