using-embedded-database
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious prompt injection patterns, bypasses, or instructions were found. The content is purely educational and focused on database engineering.
- [DATA_EXFILTRATION]: No exfiltration patterns detected. The skill correctly instructs users to store credentials in secure OS-managed keyrings or secrets managers rather than in source code.
- [COMMAND_EXECUTION]: No dangerous command execution patterns were found. The skill mentions standard development tools like pgloader and build-time dependencies for SQLCipher which are appropriate for its technical scope.
- [EXTERNAL_DOWNLOADS]: The skill references well-known and trusted external resources including the official SQLCipher GitHub repository and standard package managers (pip, apt). These references are documented neutrally as part of the installation instructions.
- [REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities or 'curl | bash' patterns were detected.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were found. The 'encryption-with-sqlcipher.md' sheet explicitly warns against hardcoding keys as an anti-pattern and provides safe alternatives.
- [COMMAND_EXECUTION]: The skill discusses '!' syntax for dynamic context injection purely in a descriptive way regarding platform capabilities, with no malicious implementation found.
- [DYNAMIC_EXECUTION]: The skill warns against dangerous dynamic SQL usage (e.g., f-strings in SQL) and instead mandates the use of parameterized queries.
Audit Metadata