duckdb-docs

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads documentation indexes from https://duckdb.org/data/docs-search.duckdb and https://ducklake.select/data/docs-search.duckdb. These are official resources provided by the vendor to facilitate documentation search.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute various system and CLI commands:
  • Checks for the presence of the duckdb binary.
  • Installs standard DuckDB extensions (httpfs, fts).
  • Manages a local cache directory in $HOME/.duckdb/docs/ and performs file operations like mkdir, stat, and mv.
  • Executes SQL queries via the duckdb CLI to synchronize data and perform BM25 text searches.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests documentation text retrieved from external databases. While this content is used to answer user questions, the instructions require the agent to extract technical terms for the search and synthesize a concise answer, which provides a layer of processing between the external data and the final response.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 03:15 PM
Security Audit — agent-trust-hub — duckdb-docs