AgentDB Advanced Features
Fail
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The troubleshooting section instructs the user to execute
sudo ufw allow 4433/udp, which constitutes privilege escalation to modify system firewall rules. - [REMOTE_CODE_EXECUTION]: Multiple sections recommend the use of
npx agentdb@latest, which fetches and executes the most recent version of a package from the npm registry at runtime. This lack of version pinning creates a risk of executing malicious or breaking code if the package is compromised. - [EXTERNAL_DOWNLOADS]: The skill references external resources and documentation hosted on
agentdb.ruv.ioand GitHub (ruvnet/agentic-flow), which are not within the recognized trusted vendor scope. - [COMMAND_EXECUTION]: The skill provides numerous shell commands for starting servers, querying databases, and performing database maintenance (e.g.,
sqlite3,node server.js), which require direct shell access and oversight.
Recommendations
- AI detected serious security threats
Audit Metadata