planetscale
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Ruby scripts to interact with the PlanetScale API. These scripts use fixed paths and pass arguments as standard shell parameters. While they perform system actions, they are limited to the skill's own functional logic for database management.
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to 'https://api.planetscale.com/v1' using Ruby's 'net/http' library. This is the official PlanetScale API domain and is used only for intended database management tasks.
- [CREDENTIALS_UNSAFE]: The skill implements a setup flow to store PlanetScale service tokens. It follows security best practices by saving these tokens to '~/.config/planetscale/' with restricted file permissions (0600) rather than hardcoding them or storing them in the project directory. It correctly guides users to place sensitive data in the standard local configuration path.
Audit Metadata