create-collection
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE] (HIGH): The provided script template contains hardcoded superuser credentials ('admin@test.local' and 'testtest123') used to authenticate with the PocketBase instance. Hardcoding credentials in automation scripts is a high-risk practice.
- [COMMAND_EXECUTION] (MEDIUM): The instructions require the agent to generate a local JavaScript file and execute it using the 'node' command. This pattern of dynamic code generation and execution poses a risk of command injection if the input used to generate the script is not properly sanitized.
- [EXTERNAL_DOWNLOADS] (LOW): The skill depends on the 'pocketbase' Node.js package, which involves fetching code from the external npm registry at runtime.
Recommendations
- AI detected serious security threats
Audit Metadata