sqlite
Fail
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The installer scripts (
scripts/install.shandscripts/install.ps1) perform high-privilege operations and modify system settings. Specifically,scripts/install.shusessudoto execute package managers such asapt,dnf,pacman, andapkfor installing thesqlite3utility. Additionally,scripts/install.ps1modifies the user'sPATHenvironment variable persistently via[Environment]::SetEnvironmentVariable, which affects the registry configuration for the current user session. - [EXTERNAL_DOWNLOADS]: The Windows installation script (
scripts/install.ps1) fetches the SQLite toolkit archive from the official website athttps://www.sqlite.org/2024/sqlite-tools-win32-x86-3450000.zip. - [REMOTE_CODE_EXECUTION]: The skill facilitates the installation and execution of binary tools from external sources. These tools are then granted access to the local file system for database manipulation and management tasks.
- [DATA_EXFILTRATION]: Documentation in
references/diff-and-sync.mdoutlines procedures for synchronizing databases with remote endpoints usingsqlite3_rsyncover SSH (e.g.,user@host:/path). While this is a native feature of the SQLite utility, it provides a functional pattern for moving database files over the network to arbitrary destinations. - [COMMAND_EXECUTION]: The skill processes potentially untrusted content through SQL execution using the
sqlite3CLI tool. - Ingestion points:
scripts/sqlite_safe_query.shaccepts SQL commands via the--sqlor--sql-fileparameters. - Boundary markers: The script implements a check to reject SQLite dot-commands (e.g.,
.open,.shell), which mitigates some risks of environment escape. - Capability inventory: The skill uses the
sqlite3binary to perform queries, backups, and integrity checks. - Sanitization: Queries are executed with the
-readonlyflag to ensure that the underlying database file is not modified during the operation.
Recommendations
- AI detected serious security threats
Audit Metadata