dbos-typescript
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install official library packages from the '@dbos-inc' NPM scope, which is the legitimate provider for the DBOS SDK and its datasource connectors.
- [CREDENTIALS_UNSAFE]: Guidelines consistently recommend using environment variables (e.g., 'process.env.DBOS_SYSTEM_DATABASE_URL') for configuring database connection strings and other sensitive secrets, adhering to security best practices.
- [DATA_EXFILTRATION]: Examples demonstrate the use of the 'fetch' API to interact with external services. These operations are correctly encapsulated within DBOS steps, which is the framework's intended method for managing side effects and ensuring workflow durability.
- [COMMAND_EXECUTION]: The skill includes standard terminal commands for package management and database schema initialization, which are necessary steps for the local development and deployment of the applications being described.
Audit Metadata