pocketbase

Fail

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for a bootstrap process that fetches release metadata from the GitHub API and downloads the PocketBase binary from the official release page. These downloads originate from a well-known and trusted service.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of the PocketBase binary for initialization tasks, such as creating a superuser, and for running the backend service in the background using standard shell commands like nohup.
  • [DYNAMIC_EXECUTION]: The skill includes functionality to generate JavaScript migration files using static templates. These generated scripts are designed to be executed by the PocketBase engine to manage database schema changes, representing a low-severity dynamic execution pattern.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with external database content, including records and collection schemas. This data ingestion process, combined with capabilities for file writing and binary execution, represents a potential surface for indirect prompt injection.
  • Ingestion points: Database records and collection schemas retrieved via API in scripts/pb_records.py and scripts/pb_collections.py.
  • Boundary markers: No specific delimiters or warnings for embedded instructions were identified in the processing scripts.
  • Capability inventory: The skill utilizes binary execution for service management and file writing for migration generation, alongside network request capabilities.
  • Sanitization: Standard JSON parsing and URL encoding are employed when handling data.
Recommendations
  • HIGH: Downloads and executes remote code from: https://api.github.com/repos/pocketbase/pocketbase/releases/latest - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 4, 2026, 07:03 PM