sql-plan-audit
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/explain-runner.mjsexecutes SQL commands from user-provided schema and query files using Node.js's built-innode:sqlitemodule. This execution is performed within an isolated, in-memory SQLite database, which limits the scope of operations to the local session. - Evidence:
db.exec(schema)(line 161) anddb.prepare(...).all()(line 82) are used to load the database schema and retrieve query plans. - [EXTERNAL_DOWNLOADS]: The documentation references installation through repositories under the author's namespace (
mizchi/skills) and thevercel-labs/skillsorganization, both of which are treated as legitimate sources in this context.
Audit Metadata