turso-db
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates interaction with external database content, including synced remote data, which serves as a potential vector for indirect prompt injection.
- Ingestion points: Query results retrieved via Turso SDKs or the MCP server (referenced in
SKILL.md). - Boundary markers:
SKILL.mdincludes explicit instructions for the agent to treat all data returned from database queries as untrusted third-party content and avoid interpreting them as instructions. - Capability inventory: Provides read/write access to local and remote databases across multiple platforms, including local file access and network requests for sync operations.
- Sanitization: Relies on the provided prompt instructions to the agent to treat results as plain data and avoid execution of content returned from the database.
- [EXTERNAL_DOWNLOADS]: The skill documentation references installation commands for official libraries and tools provided by the vendor.
- Evidence: References installation of
@tursodatabaseNPM packages,pytursofor Python,tursogofor Go, and thetursocrate for Rust, all of which are official resources for Turso database interaction.
Audit Metadata