surrealdb-cli
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents installation procedures that download scripts from
https://install.surrealdb.comandhttps://windows.surrealdb.comfor execution via shell and PowerShell respectively. These are the official distribution channels managed by the vendor. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the
surrealCLI binary to perform database operations such as starting servers, executing SQL, importing/exporting data, and upgrading the tool itself. - [EXTERNAL_DOWNLOADS]: References official software distribution points including the vendor's dedicated installation domain, the official Homebrew repository, and the
surrealdb/surrealdbDocker image. - [CREDENTIALS_UNSAFE]: The documentation explicitly advises against passing passwords or tokens as command-line flags to avoid exposure in process trees or shell history, instead recommending the use of standard environment variables like
SURREAL_USERandSURREAL_PASS.
Audit Metadata