using-sqlite-worktrees
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local CLI tools (
gitandsqlite3) to manage database states and verify worktree status. The Ruby script utilizesOpen3.capture3with arguments passed as an array, which is a secure implementation that prevents shell injection vulnerabilities. - [SAFE]: The skill processes
config/database.ymlusingERB(Embedded Ruby), which is standard and expected behavior for Rails applications. This dynamic evaluation is restricted to the local project's configuration file and does not process untrusted remote content. - [SAFE]: The skill performs local file management, including copying and backing up
.sqlite3files within the project's directory structure. No network operations, credential harvesting, or indicators of data exfiltration were detected.
Audit Metadata