sqlite-to-fast-sql
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
@capgo/capacitor-fast-sqlandsql.jspackages from the npm registry. - [COMMAND_EXECUTION]: Employs standard package management commands (
npm install) and native platform synchronization tools (npx cap sync) to modify the development environment. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by instructing the agent to ingest and act upon data from the local project environment.
- Ingestion points: Reads the
package.jsonfile to identify current plugins, SQL usage, and schema patterns (Step 1). - Boundary markers: Absent; there are no explicit delimiters or instructions to the agent to treat the ingested file content strictly as data.
- Capability inventory: The skill is capable of installing/removing dependencies and modifying application source code across multiple files (Steps 3-6).
- Sanitization: Absent; the instructions do not include steps to validate or sanitize the contents of the
package.jsonfile before the agent processes it.
Audit Metadata