cbdb-local

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads a ~556MB SQLite database from Hugging Face (huggingface.co/datasets/cbdb/cbdb-sqlite). The download URL and SHA-256 checksum are resolved from a metadata file hosted on the official CBDB project's GitHub repository. Both sources are well-known and reputable platforms for academic data hosting.
  • [COMMAND_EXECUTION]: The cbdb_query.py script utilizes the subprocess module to execute external binaries: 7z (or 7zz) is used for archive extraction during setup, and dot (Graphviz) is used for rendering kinship diagrams in SVG format. These executions are constrained to the local environment and the project's data files.
  • [SAFE]: The installation process implements an integrity check using SHA-256 to verify that the downloaded database file has not been tampered with. Additionally, the raw SQL query interface is restricted to SELECT statements, preventing unauthorized data modification or administrative database operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 05:54 PM