spacetimedb-deploy

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute the official SpacetimeDB CLI installation script from https://install.spacetimedb.com. This is a routine and canonical setup procedure for the platform.
  • [COMMAND_EXECUTION]: Includes server configuration templates for systemd, Nginx, and Azure Key Vault that require administrative or sudo privileges. These are standard operations for deploying and securing database services on Linux hosts.
  • [EXTERNAL_DOWNLOADS]: References well-known technology resources, including the clockworklabs/spacetime Docker image and lucaslorentz/caddy-docker-proxy, to facilitate production-ready infrastructure.
  • [SAFE]: Includes a Rust code snippet in the PGWire guide that implements a NoVerifier to skip TLS certificate checks. The documentation specifies this is for development/local connectivity context, though it remains a security anti-pattern for production use.
  • [SAFE]: The skill facilitates an attack surface for indirect prompt injection. Ingestion points: External log data entered via the spacetime logs command. Boundary markers: Absent. Capability inventory: Significant command execution and file system access as described in SKILL.md and reference guides. Sanitization: Absent. This is a common risk for monitoring tools that process untrusted log content.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 08:58 PM
Security Audit — agent-trust-hub — spacetimedb-deploy