NYC

moai-domain-database

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE] (SAFE): The skill utilizes placeholders for database connection strings and contains no hardcoded credentials or sensitive configuration files.
  • [COMMAND_EXECUTION] (SAFE): Database operations are performed through a specialized 'moai' CLI and a Python-based DatabaseManager. The examples provided follow safe implementation patterns for relational and document-based data management.
  • [INDIRECT_PROMPT_INJECTION] (SAFE): The skill supports processing external files like SQL migrations and JSON aggregation pipelines. This represents a standard functional surface for database tools; the skill mitigates risk by demonstrating the use of parameterized queries and structured data formats. Ingestion points: 'schema_v2.sql', 'analytics_pipeline.json'. Boundary markers: Absent. Capability inventory: 'moai db:migrate', 'postgresql.query', 'mongodb.aggregate'. Sanitization: Parameterized queries are used in Python examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:28 PM