spacetimedb-deploy
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute the official SpacetimeDB CLI installation script from
https://install.spacetimedb.com. This is a routine and canonical setup procedure for the platform. - [COMMAND_EXECUTION]: Includes server configuration templates for systemd, Nginx, and Azure Key Vault that require administrative or
sudoprivileges. These are standard operations for deploying and securing database services on Linux hosts. - [EXTERNAL_DOWNLOADS]: References well-known technology resources, including the
clockworklabs/spacetimeDocker image andlucaslorentz/caddy-docker-proxy, to facilitate production-ready infrastructure. - [SAFE]: Includes a Rust code snippet in the PGWire guide that implements a
NoVerifierto skip TLS certificate checks. The documentation specifies this is for development/local connectivity context, though it remains a security anti-pattern for production use. - [SAFE]: The skill facilitates an attack surface for indirect prompt injection. Ingestion points: External log data entered via the
spacetime logscommand. Boundary markers: Absent. Capability inventory: Significant command execution and file system access as described inSKILL.mdand reference guides. Sanitization: Absent. This is a common risk for monitoring tools that process untrusted log content.
Audit Metadata