sqlite-ops

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists primarily of educational and operational documentation for SQLite. The included Python script eqp-triage.py is designed to be run locally and uses a read-only URI for database connections to prevent accidental or malicious modifications. The skill author metadata varies from the provided developer context, but the content remains purely instructional and functional for database optimization.\n- [INDIRECT_PROMPT_INJECTION]: The eqp-triage.py script parses database query plans which could potentially contain attacker-controlled strings (e.g., table or index names). This presents a minor indirect injection surface if the script's output is automatically processed by an agent, though the risk is low given its diagnostic purpose.\n
  • Ingestion points: scripts/eqp-triage.py reads plan details from standard input or database files.\n
  • Boundary markers: There are no explicit delimiters used to isolate the ingested plan text from the script's output.\n
  • Capability inventory: The skill requests Read, Write, and Bash tools. The script uses sqlite3 and json standard libraries.\n
  • Sanitization: The script performs no specific sanitization on the plan strings before outputting them, relying on standard regular expression matching.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 01:31 PM