sealos-database
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes command-line tools to interact with the environment and the Sealos platform.
- Executes
scripts/analyze-project-database.mjsto scan the local project for database configurations. - Executes
sealos-clifor provisioning and managing cloud databases. - [EXTERNAL_DOWNLOADS]: The skill dynamically acquires necessary tooling from external repositories.
- Uses
npx -y sealos-cli@latestto download and run the Sealos CLI if it is not present on the host system. - [DATA_EXFILTRATION]: The skill interacts with sensitive files containing credentials.
- Reads and modifies project environment files like
.envand.env.localto inject database connection strings. - Accesses the user's Sealos configuration at
~/.sealos/auth.jsonand~/.sealos/kubeconfigfor authentication. - [PROMPT_INJECTION]: The project analyzer script parses contents from the working directory, creating a surface for indirect instructions.
- Ingestion:
scripts/analyze-project-database.mjsreads project files to detect database signals. - Boundaries:
SKILL.mddirects the agent to inspect files before editing. - Capabilities: The skill can modify
.envfiles and perform database operations viasealos-cli. - Sanitization: The analyzer extracts only keys and patterns, avoiding full content exposure.
Audit Metadata