The Agent Skills Directory

[COMMAND_EXECUTION]: The skill documents command-line installation of packages and utilities including npm install better-sqlite3, brew install sqlite3, and apt-get install sqlite3 in SKILL.md.
[PRIVILEGE_ESCALATION]: The instructions include sudo apt-get install sqlite3 to install system tools. While this is a standard method for installing the well-known SQLite utility on Debian-based systems, it involves executing commands with administrative privileges.
[INDIRECT_PROMPT_INJECTION]: The skill provides an interface for processing external data through database operations and exports, which presents a potential injection surface.
Ingestion points: Data ingested via database query parameters and processed by the exportToSql function in SKILL.md.
Boundary markers: The documentation consistently advocates for prepared statements (parameterized queries) to delimit code from data, which is a primary defense against SQL injection.
Capability inventory: The skill utilizes file system write capabilities for database creation, fs.copyFileSync for backups, and fs.writeFileSync for SQL exports.
Sanitization: Demonstrates manual character escaping for string values within the exportToSql function (v.replace(/'/g, "''")).

SQLite