mongodb-schema-design
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official MongoDB MCP Server repository on GitHub (
https://github.com/mongodb-js/mongodb-mcp-server) for automatic verification of schema and performance metrics. These references target a well-known service and are documented for integration purposes. - [INDIRECT_PROMPT_INJECTION]: The skill has a defined surface for processing external data, including natural language input from users, query statistics, and slow query logs from Atlas. It includes guidance on assessing the environment and choosing diagnostic sources, effectively defining boundaries for data ingestion.
- [COMMAND_EXECUTION]: The skill mentions the execution of MongoDB commands (such as
find,aggregate, anddb-stats) via the MongoDB MCP server. However, it explicitly defines an action policy where write and destructive operations (likeupdate-manyordrop-collection) require explicit user confirmation before execution, adhering to the principle of least privilege.
Audit Metadata