DatabaseVerifiziert

senior-backend

Quelle ansehen

17/100

Dieser Skill ist 77% riskanter als der Durchschnitt der Kategorie Database.

Voir le score complet

Connectez-vous pour afficher le score detaille du skill.

Impact Scope

Lokal

Netzwerk

Global

Empfehlungen

⛔ Score 17/100 — This skill presents serious risks. Manual audit required.

📤 Data exfiltration pattern detected.

🔑 Environment variable access — your API keys may be read.

$npx agentfend install cmn92ruak00z1u1ipm3apm2og

Beschreibung

Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build microservices", "review backend code", "set up GraphQL", "handle database m...

DatabaseVerifizierter Ersteller

Trust Score

34trust

⭐ 7359🍴 881

Updated vor 4 Tagen

Analysiert

27.03.2026, 15:47

Erkannte Risiken3

Data Exfiltrationcritical

data_exfiltration

Data exfiltration attempt

Line 81

Snippets

L81app.post('/forgot-password', async (req, res) => {

L95app.post('/forgot-password', passwordResetLimiter, async (req, res) => {

L81app.post('/forgot-password', async (req, res) => {

L95app.post('/forgot-password', passwordResetLimiter, async (req, res) => {

Env Accessmedium

env_access

Environment variable access

Line 227

Snippets

L227 secret: process.env.JWT_SECRET, // Must be from env, never hardcoded

L357 const accessToken = jwt.sign(payload, process.env.JWT_SECRET!, {

L364 process.env.JWT_REFRESH_SECRET!,

L380 const payload = jwt.verify(token, process.env.JWT_SECRET!) as TokenPayload;

Network Callmedium

network_call

Outbound network call

Line 291

Snippets

L291app.post('/fetch-url', async (req, res) => {

L292 const response = await fetch(req.body.url); // SSRF vulnerability!

L335app.post('/fetch-url', async (req, res) => {

L342 const response = await fetch(url, {

L291app.post('/fetch-url', async (req, res) => {

Voir les risques detectes

Connectez-vous pour consulter l'analyse detaillee des risques.