spacetimedb-cli
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
spacetime initandspacetime devsubcommands support a--templateoption which can accept a GitHub repository (owner/repo) or a direct URL. This allows the tool to download and initialize external project structures. - Evidence: Found in
references/cli-reference.mdunder theinitanddevsections. - [DATA_EXFILTRATION]: The skill documents access to sensitive system paths and configuration files. It specifically references the default data directory (~/.local/share/spacetime/data) and configuration for private keys (jwt-priv-key-path).
- Evidence:
references/cli-reference-standalone-config.mdspecifies the path/home/user/.local/share/spacetime/dataand thejwt-priv-key-pathconfiguration key. - Evidence:
references/cli-reference.mddescribes thespacetime login show --tokencommand which outputs authentication tokens. - [INDIRECT_PROMPT_INJECTION]: The skill provides functions for reading logs and executing SQL queries against external databases, which may contain untrusted data that could influence the agent's behavior.
- Ingestion points:
spacetime logs,spacetime sql, andspacetime callsubcommands inreferences/cli-reference.md. - Boundary markers: None.
- Capability inventory: Shell command execution via
spacetimeCLI. - Sanitization: None mentioned.
- [DYNAMIC_EXECUTION]: The
spacetime generatecommand produces client-side source code (bindings) in languages like TypeScript, C#, and Rust based on the database schema. - Evidence:
SKILL.mdandreferences/cli-reference.mddocument the code generation functionality. - [COMMAND_EXECUTION]: The skill facilitates the execution of a wide range of system commands via the
spacetimeCLI, including subcommands that accept non-interactive flags (--yes, -y) to bypass user confirmation for destructive actions likespacetime deleteorspacetime publish --delete-data. - Evidence: Subcommand definitions in
references/cli-reference.md.
Audit Metadata