opendeploy-database
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill checks for updates to the
@opendeploydev/clipackage via npm. This is a vendor-owned package intended for use with this skill. - [COMMAND_EXECUTION]: The skill uses the
opendeployCLI and standard database clients (psql, mysql, etc.) to perform administrative tasks. It follows secure execution patterns by passing sensitive data through files rather than command-line arguments. - [SAFE]: The skill implements advanced credential protection, including the use of
umask 077and0600file modes for JSON body files containing database passwords. It explicitly forbids the logging or printing of generated secrets. - [SAFE]: Sensitive operations, such as enabling external TCP access to managed databases, require explicit user consent and include mandatory cleanup steps to disable access and remove local credential files.
Audit Metadata