attach-db
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute
duckdbCLI commands. It correctly uses absolute path resolution (RESOLVED_PATH) and shell quoting to prevent common command injection vulnerabilities when handling file paths supplied by the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data by reading table schemas and row counts from database files. This information is then summarized for the user. This represents a standard functional surface for database tools, and the data is used for informational purposes within the agent's summary.
- [PERSISTENCE]: The skill creates and modifies local configuration files (
state.sql) and environment settings (appending to.gitignore). These are standard behaviors for maintaining tool session state and do not constitute malicious system persistence.
Audit Metadata