okf-sqlite
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes SQL queries (SELECT, CREATE, ALTER) against a SQLite database file provided by the user via the
--dbflag. This is the primary function of the tool and is triggered by explicit user commands. - [EXTERNAL_DOWNLOADS]: The documentation suggests installing the tool via
go installfrom the author's GitHub repository (github.com/xSAVIKx/okf-skills). This is a standard installation method for Go-based tools and targets the official vendor source defined in the skill metadata. - [INDIRECT_PROMPT_INJECTION]: The
ingestcommand parses Markdown documents (OKF bundles) and uses the extracted data to construct and execute SQL DDL statements (e.g.,CREATE TABLE,ALTER TABLE). While this represents a surface for indirect injection if a malicious bundle is processed, the tool is intended for schema synchronization and performs operations on a local database under user control. - Ingestion points: Reads OKF bundle Markdown files from a user-specified directory (e.g.,
tables/*.md). - Boundary markers: Uses standard Markdown headers (e.g.,
# Columns) and table structures to delimit data sections. - Capability inventory: Performs local file reads/writes and executes SQLite database commands via the
modernc.org/sqlitedriver. - Sanitization: Uses backticks to wrap table and column identifiers in generated SQL queries to prevent basic structural breakage.
Audit Metadata