pocketbase
Fail
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for a bootstrap process that fetches release metadata from the GitHub API and downloads the PocketBase binary from the official release page. These downloads originate from a well-known and trusted service.
- [COMMAND_EXECUTION]: The skill facilitates the execution of the PocketBase binary for initialization tasks, such as creating a superuser, and for running the backend service in the background using standard shell commands like nohup.
- [DYNAMIC_EXECUTION]: The skill includes functionality to generate JavaScript migration files using static templates. These generated scripts are designed to be executed by the PocketBase engine to manage database schema changes, representing a low-severity dynamic execution pattern.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external database content, including records and collection schemas. This data ingestion process, combined with capabilities for file writing and binary execution, represents a potential surface for indirect prompt injection.
- Ingestion points: Database records and collection schemas retrieved via API in scripts/pb_records.py and scripts/pb_collections.py.
- Boundary markers: No specific delimiters or warnings for embedded instructions were identified in the processing scripts.
- Capability inventory: The skill utilizes binary execution for service management and file writing for migration generation, alongside network request capabilities.
- Sanitization: Standard JSON parsing and URL encoding are employed when handling data.
Recommendations
- HIGH: Downloads and executes remote code from: https://api.github.com/repos/pocketbase/pocketbase/releases/latest - DO NOT USE without thorough review
Audit Metadata