sqlite-ops
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists primarily of educational and operational documentation for SQLite. The included Python script
eqp-triage.pyis designed to be run locally and uses a read-only URI for database connections to prevent accidental or malicious modifications. The skill author metadata varies from the provided developer context, but the content remains purely instructional and functional for database optimization.\n- [INDIRECT_PROMPT_INJECTION]: Theeqp-triage.pyscript parses database query plans which could potentially contain attacker-controlled strings (e.g., table or index names). This presents a minor indirect injection surface if the script's output is automatically processed by an agent, though the risk is low given its diagnostic purpose.\n - Ingestion points:
scripts/eqp-triage.pyreads plan details from standard input or database files.\n - Boundary markers: There are no explicit delimiters used to isolate the ingested plan text from the script's output.\n
- Capability inventory: The skill requests
Read,Write, andBashtools. The script usessqlite3andjsonstandard libraries.\n - Sanitization: The script performs no specific sanitization on the plan strings before outputting them, relying on standard regular expression matching.
Audit Metadata