skills/xsavikx/okf-skills/okf-sqlite/Gen Agent Trust Hub

okf-sqlite

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes SQL queries (SELECT, CREATE, ALTER) against a SQLite database file provided by the user via the --db flag. This is the primary function of the tool and is triggered by explicit user commands.
  • [EXTERNAL_DOWNLOADS]: The documentation suggests installing the tool via go install from the author's GitHub repository (github.com/xSAVIKx/okf-skills). This is a standard installation method for Go-based tools and targets the official vendor source defined in the skill metadata.
  • [INDIRECT_PROMPT_INJECTION]: The ingest command parses Markdown documents (OKF bundles) and uses the extracted data to construct and execute SQL DDL statements (e.g., CREATE TABLE, ALTER TABLE). While this represents a surface for indirect injection if a malicious bundle is processed, the tool is intended for schema synchronization and performs operations on a local database under user control.
  • Ingestion points: Reads OKF bundle Markdown files from a user-specified directory (e.g., tables/*.md).
  • Boundary markers: Uses standard Markdown headers (e.g., # Columns) and table structures to delimit data sections.
  • Capability inventory: Performs local file reads/writes and executes SQLite database commands via the modernc.org/sqlite driver.
  • Sanitization: Uses backticks to wrap table and column identifiers in generated SQL queries to prevent basic structural breakage.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 07:05 PM
Security Audit — agent-trust-hub — okf-sqlite