AgentDB Advanced Features
Warn
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Documentation includes a
sudocommand (sudo ufw allow 4433/udp) which requires root privileges to modify system firewall rules for QUIC synchronization. - [REMOTE_CODE_EXECUTION]: Instruction to use
npx agentdb@latestwhich downloads and executes the latest version of a package from the npm registry, representing a remote code execution risk. - [EXTERNAL_DOWNLOADS]: The skill relies on external Node.js packages
agentic-flowandagentdbfrom public registries. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface.
- Ingestion points: The
insertPatternfunction accepts external data such asdocumentTextinSKILL.md. - Boundary markers: No delimiters or ignore instructions are present in the provided examples.
- Capability inventory: The skill performs subprocess calls via CLI and network operations via the QUIC protocol.
- Sanitization: No sanitization or validation of ingested text is performed before it is synthesized into context.
- [PROMPT_INJECTION]: Metadata analysis reveals a potential character-substitution pattern between the author handle
aegnticand the referenced toolsetagentic-flow(ae vs ag), which can be a sign of deceptive naming.
Audit Metadata