cbdb-local
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a ~556MB SQLite database from Hugging Face (
huggingface.co/datasets/cbdb/cbdb-sqlite). The download URL and SHA-256 checksum are resolved from a metadata file hosted on the official CBDB project's GitHub repository. Both sources are well-known and reputable platforms for academic data hosting. - [COMMAND_EXECUTION]: The
cbdb_query.pyscript utilizes thesubprocessmodule to execute external binaries:7z(or7zz) is used for archive extraction during setup, anddot(Graphviz) is used for rendering kinship diagrams in SVG format. These executions are constrained to the local environment and the project's data files. - [SAFE]: The installation process implements an integrity check using SHA-256 to verify that the downloaded database file has not been tampered with. Additionally, the raw SQL query interface is restricted to
SELECTstatements, preventing unauthorized data modification or administrative database operations.
Audit Metadata