opendeploy-database

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill checks for updates to the @opendeploydev/cli package via npm. This is a vendor-owned package intended for use with this skill.
  • [COMMAND_EXECUTION]: The skill uses the opendeploy CLI and standard database clients (psql, mysql, etc.) to perform administrative tasks. It follows secure execution patterns by passing sensitive data through files rather than command-line arguments.
  • [SAFE]: The skill implements advanced credential protection, including the use of umask 077 and 0600 file modes for JSON body files containing database passwords. It explicitly forbids the logging or printing of generated secrets.
  • [SAFE]: Sensitive operations, such as enabling external TCP access to managed databases, require explicit user consent and include mandatory cleanup steps to disable access and remove local credential files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 07:17 AM
Security Audit — agent-trust-hub — opendeploy-database