using-sqlite-worktrees

Pass

Audited by Gen Agent Trust Hub on May 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes local CLI tools (git and sqlite3) to manage database states and verify worktree status. The Ruby script utilizes Open3.capture3 with arguments passed as an array, which is a secure implementation that prevents shell injection vulnerabilities.
  • [SAFE]: The skill processes config/database.yml using ERB (Embedded Ruby), which is standard and expected behavior for Rails applications. This dynamic evaluation is restricted to the local project's configuration file and does not process untrusted remote content.
  • [SAFE]: The skill performs local file management, including copying and backing up .sqlite3 files within the project's directory structure. No network operations, credential harvesting, or indicators of data exfiltration were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
May 8, 2026, 07:55 AM
Security Audit — agent-trust-hub — using-sqlite-worktrees