spacetimedb-cli
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
spacetime initandspacetime devcommands allow fetching project templates from external GitHub repositories using the--templateflag. - [COMMAND_EXECUTION]: The skill facilitates the execution of various
spacetimesubcommands, includingpublish,call,sql, anddelete, which manipulate database state and configuration. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes data from external database logs and SQL query results.
- Ingestion points: Output from
spacetime logs [DATABASE]andspacetime sql [DATABASE] "<QUERY>"(specified inSKILL.mdandreferences/cli-reference.md). - Boundary markers: None provided; the agent is not instructed to use specific delimiters or to ignore instructions embedded in the tool output.
- Capability inventory: The skill provides commands for database state changes and function invocation (
spacetime call,spacetime publish,spacetime delete). - Sanitization: No sanitization or validation of the ingested data is specified.
- [CREDENTIALS_UNSAFE]: The documentation includes instructions for the
spacetime login --tokencommand, enabling manual token entry. Additionally,references/cli-reference-standalone-config.mddetails how to configure paths for JWT private keys (jwt-priv-key-path) within theconfig.tomlfile.
Audit Metadata