install-duckdb

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references https://install.duckdb.org and https://duckdb.org to download the DuckDB CLI and check for the latest version. These are official vendor domains for DuckDB.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute duckdb commands and shell scripts for installation (curl | sh). These operations are consistent with the skill's primary purpose of managing a database environment.
  • [REMOTE_CODE_EXECUTION]: The pattern curl -fsSL https://install.duckdb.org | sh is present in the documentation and update instructions. This is a standard installation method provided by the vendor and is used here in an appropriate context for a development-focused skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 09:44 PM