db9
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
curlcommand to interact with the db9.ai REST API. It also utilizes the local/tmp/directory to store temporary JSON payloads for database operations. - [EXTERNAL_DOWNLOADS]: Network requests are performed to the legitimate vendor domain
api.db9.aito provision and query databases. - [CREDENTIALS_UNSAFE]: The skill uses the
DB9_API_KEYenvironment variable for authentication, which is a standard and secure practice for secret management. It also includes explicit instructions to the agent to avoid sending this key to any domain other than the official API endpoint.
Audit Metadata