duckdb-docs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads documentation indexes from
https://duckdb.org/data/docs-search.duckdbandhttps://ducklake.select/data/docs-search.duckdb. These are official resources provided by the vendor to facilitate documentation search. - [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute various system and CLI commands:
- Checks for the presence of the
duckdbbinary. - Installs standard DuckDB extensions (
httpfs,fts). - Manages a local cache directory in
$HOME/.duckdb/docs/and performs file operations likemkdir,stat, andmv. - Executes SQL queries via the
duckdbCLI to synchronize data and perform BM25 text searches. - [INDIRECT_PROMPT_INJECTION]: The skill ingests documentation text retrieved from external databases. While this content is used to answer user questions, the instructions require the agent to extract technical terms for the search and synthesize a concise answer, which provides a layer of processing between the external data and the final response.
Audit Metadata