better-sqlite3-rebuild
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
npm rebuildshell command. This command triggers the compilation of native modules based on the local environment and project dependencies. - [PROMPT_INJECTION]: The skill includes a specific directive to skip user confirmation ("Do this without asking the user first
- just rebuild and retry"). This overrides the typical safety protocol of requesting permission before executing shell commands, increasing the risk of unintended or autonomous system changes.
- [INDIRECT_PROMPT_INJECTION]: The skill is triggered by external error messages, creating a surface where potentially untrusted data (error logs) can trigger autonomous command execution without human-in-the-loop verification.
Audit Metadata