dbx-database-client
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the installation and building of a database client from its source repository on GitHub. It uses standard development tools and libraries, including Tauri, Rust, and Vue.js.\n- [INDIRECT_PROMPT_INJECTION]: The tool features an AI SQL assistant that processes natural language and interacts with external database data. While this presents an indirect prompt injection surface, it is a core feature of the tool and is handled through standard API integration with OpenAI and Anthropic.\n- [PRIVILEGE_ESCALATION]: Documentation includes instructions for macOS users to use
xattr -crto allow the execution of the application. This is a common practice for running unsigned developer tools on macOS and does not represent a malicious attempt at privilege escalation.
Audit Metadata