api-baas-turso
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the official Turso CLI using a script from the get.tur.so domain.
- [REMOTE_CODE_EXECUTION]: The documentation in reference.md includes a shell command pattern 'curl -sSfL https://get.tur.so/install.sh | bash' to install the Turso CLI, which executes a script from the official service provider.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions facilitate reading data from external libSQL databases. 1. Ingestion points: Query results fetched via client.execute() and client.batch() in examples/core.md. 2. Boundary markers: None explicitly defined for handling query results, though parameterized queries are required for inputs. 3. Capability inventory: Subprocess calls for CLI commands and network operations for database connectivity. 4. Sanitization: Parameterized queries are used for outgoing data; no specific sanitization is mentioned for incoming query results.
Audit Metadata