package-context-sql-blue
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The blue launcher script downloads code from external Git repositories hosted on GitHub.
- Evidence: The variables package_url='https://github.com/getcolors/context-sql.git' and blue_url='https://github.com/getcolors/blue.git' are defined in the blue file. The script uses pinned commit hashes to ensure specific versions of the code are retrieved.
- [DYNAMIC_EXECUTION]: The skill uses uv to dynamically load and execute Python code retrieved from remote sources.
- Evidence: The blue script executes uv run --no-project with package specifications targeting Git URLs, followed by a Python command to invoke the package's entry point.
- [COMMAND_EXECUTION]: The skill defines a set of operational commands for the agent or user to manage the local database lifecycle.
- Evidence: SKILL.md documents commands like ./blue build, ./blue create, and ./blue backup which perform initialization, schema migrations, and backups.
Audit Metadata