surrealdb
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the uv tool to execute local management scripts such as doctor.py, schema.py, and onboard.py.
- [COMMAND_EXECUTION]: Scripts interact with the local environment by invoking the surreal CLI for database operations and the gh CLI for checking repository states.
- [EXTERNAL_DOWNLOADS]: The skill connects to a user-specified SurrealDB endpoint via WebSocket to perform health checks and retrieve schema information.
- [EXTERNAL_DOWNLOADS]: The check_upstream.py script performs network requests to the GitHub API using the gh CLI to ensure the skill remains synchronized with upstream SurrealDB repositories.
- [SAFE]: Database credentials are managed through environment variables (SURREAL_USER, SURREAL_PASS), and the documentation correctly identifies these as sensitive information, advising against the use of default credentials in production.
Audit Metadata