ecosystem-database

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill contains a Python script scripts/install_all.py designed to install associated database skills using the platform's CLI tool.
  • The script uses subprocess.run to execute skills install for a hardcoded list of specific modules including schema-architect, access-policy-designer, and data-masker.
  • Analysis confirms that no user-supplied input or untrusted data flows into these shell commands, mitigating risks of command injection.
  • The instructions in SKILL.md guide the agent to run this script as a setup step, which is standard behavior for an ecosystem manifest skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 10:51 PM