sqlite-to-fast-sql
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the
!command syntax inSKILL.mdto execute anodescript when the skill is first loaded. This script inspects the localpackage.jsonto identify current SQLite-related dependencies. The command is scoped to project inspection and does not perform network operations or access sensitive system credentials. - [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface by ingesting the content of the project's
package.jsonfile. While malicious package names could theoretically be injected into the agent's context, the risk is mitigated by the script's restrictive filtering logic. - Ingestion points:
package.json(read by the load-time inspection script) - Boundary markers: None present for the output of the automated snapshot
- Capability inventory: The skill instructions include
npminstallation,npxsync commands, and manual configuration of native project files (Info.plist, XML files) - Sanitization: The inspection script uses a whitelist of specific strings ('needles') to filter dependency names before they are logged to the console
- [DYNAMIC_EXECUTION]: The inspection mechanism uses
node -eto execute a script that parses the project's manifest at runtime. This execution is used for situational awareness during the migration process and does not integrate untrusted input from external network sources.
Audit Metadata