node-sqlite-vec
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a storage and retrieval system for vector search (RAG), which involves ingesting and storing arbitrary text data (
body) in a SQLite database. This data could contain malicious instructions designed to influence an AI agent when the data is retrieved and processed. - Ingestion points: The
addfunction described inSKILL.mdaccepts abodystring from external sources to be stored in theitemstable. - Boundary markers: There are no explicit instructions or delimiters provided to wrap the retrieved content to prevent an agent from following instructions embedded within the text.
- Capability inventory: The skill enables file-system writes through the
DatabaseSyncAPI for database persistence. - Sanitization: While the code correctly uses prepared statements to prevent traditional SQL injection, it does not provide mechanisms to sanitize or filter the stored text content for downstream AI safety.
Audit Metadata