sqlite

Fail

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The installer scripts (scripts/install.sh and scripts/install.ps1) perform high-privilege operations and modify system settings. Specifically, scripts/install.sh uses sudo to execute package managers such as apt, dnf, pacman, and apk for installing the sqlite3 utility. Additionally, scripts/install.ps1 modifies the user's PATH environment variable persistently via [Environment]::SetEnvironmentVariable, which affects the registry configuration for the current user session.
  • [EXTERNAL_DOWNLOADS]: The Windows installation script (scripts/install.ps1) fetches the SQLite toolkit archive from the official website at https://www.sqlite.org/2024/sqlite-tools-win32-x86-3450000.zip.
  • [REMOTE_CODE_EXECUTION]: The skill facilitates the installation and execution of binary tools from external sources. These tools are then granted access to the local file system for database manipulation and management tasks.
  • [DATA_EXFILTRATION]: Documentation in references/diff-and-sync.md outlines procedures for synchronizing databases with remote endpoints using sqlite3_rsync over SSH (e.g., user@host:/path). While this is a native feature of the SQLite utility, it provides a functional pattern for moving database files over the network to arbitrary destinations.
  • [COMMAND_EXECUTION]: The skill processes potentially untrusted content through SQL execution using the sqlite3 CLI tool.
  • Ingestion points: scripts/sqlite_safe_query.sh accepts SQL commands via the --sql or --sql-file parameters.
  • Boundary markers: The script implements a check to reject SQLite dot-commands (e.g., .open, .shell), which mitigates some risks of environment escape.
  • Capability inventory: The skill uses the sqlite3 binary to perform queries, backups, and integrity checks.
  • Sanitization: Queries are executed with the -readonly flag to ensure that the underlying database file is not modified during the operation.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — sqlite