dbs-save

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes shell commands such as mkdir -p to create and manage local directory structures for session archives.
  • [DYNAMIC_EXECUTION]: The skill executes a Python one-liner to generate standardized ISO 8601 timestamps for use in archive filenames and YAML frontmatter.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a sink for conversation history, which may contain untrusted data, writing it to the local filesystem. • Ingestion points: Dialogue context is parsed to extract conclusions, rejected paths, and next steps. • Boundary markers: Output is organized into predefined Markdown headers and YAML frontmatter fields. • Capability inventory: The skill possesses file-writing, directory-creation, and local code-execution capabilities. • Sanitization: It automatically sanitizes project identifiers (slugs) and file titles by replacing non-alphanumeric characters with hyphens to mitigate path-traversal risks.
  • [DATA_EXFILTRATION]: The skill stores diagnostic findings in local Markdown files. While it does not transmit data over the network, the author provides explicit warnings about the lack of encryption for sensitive commercial data and recommends using .gitignore to prevent accidental exposure in version-controlled projects.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:51 AM