install-dexsql
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches prebuilt binaries, license files, and release metadata from the official LSPosed/dexsql-release repository on GitHub.
- [COMMAND_EXECUTION]: Executes the downloaded binary for verification tasks such as version checking and license extraction, and utilizes the codex CLI tool to register the server with the local MCP client.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from the GitHub Releases API to determine installation logic and asset selection. * Ingestion points: GitHub API release endpoints referenced in SKILL.md. * Boundary markers: The instructions do not specify delimiting markers for the external release notes or metadata being processed. * Capability inventory: Includes shell command execution (codex, dexsql) and file system writes to local directories. * Sanitization: Implements SHA-256 integrity verification for downloaded assets when checksums are provided by the upstream API.
Audit Metadata