ccboard-remember
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
sqlite3command-line utility and thepwdcommand to perform database operations on a local file located at~/.ccboard/insights.db. This is the core functionality for persistent knowledge storage.\n- [SAFE]: Security instructions are explicitly provided within the skill, requiring the agent to escape single quotes (mitigating SQL injection) and verify the absence of shell metacharacters in user input (mitigating command injection) before execution.\n- [SAFE]: While the skill creates an indirect prompt injection surface by storing user input for future context, it targets a local application-specific database and mandates input sanitization during the storage process.
Audit Metadata