spacetimedb-cli

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The spacetime init and spacetime dev subcommands support a --template option which can accept a GitHub repository (owner/repo) or a direct URL. This allows the tool to download and initialize external project structures.
  • Evidence: Found in references/cli-reference.md under the init and dev sections.
  • [DATA_EXFILTRATION]: The skill documents access to sensitive system paths and configuration files. It specifically references the default data directory (~/.local/share/spacetime/data) and configuration for private keys (jwt-priv-key-path).
  • Evidence: references/cli-reference-standalone-config.md specifies the path /home/user/.local/share/spacetime/data and the jwt-priv-key-path configuration key.
  • Evidence: references/cli-reference.md describes the spacetime login show --token command which outputs authentication tokens.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides functions for reading logs and executing SQL queries against external databases, which may contain untrusted data that could influence the agent's behavior.
  • Ingestion points: spacetime logs, spacetime sql, and spacetime call subcommands in references/cli-reference.md.
  • Boundary markers: None.
  • Capability inventory: Shell command execution via spacetime CLI.
  • Sanitization: None mentioned.
  • [DYNAMIC_EXECUTION]: The spacetime generate command produces client-side source code (bindings) in languages like TypeScript, C#, and Rust based on the database schema.
  • Evidence: SKILL.md and references/cli-reference.md document the code generation functionality.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of a wide range of system commands via the spacetime CLI, including subcommands that accept non-interactive flags (--yes, -y) to bypass user confirmation for destructive actions like spacetime delete or spacetime publish --delete-data.
  • Evidence: Subcommand definitions in references/cli-reference.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:12 PM