node-sqlite-vec
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical recipes for using the built-in Node.js SQLite module with a vector search extension.
- [EXTERNAL_DOWNLOADS]: Instructions include installing sqlite-vec and TypeScript via standard package managers. The referenced repository for sqlite-vec is a well-known community project.
- [COMMAND_EXECUTION]: The skill provides standard shell commands for project initialization and running tests using the built-in Node.js test runner.
- [DYNAMIC_EXECUTION]: The skill explains how to load SQLite extensions. It correctly implements security best practices by toggling the allowExtension and enableLoadExtension flags and re-disabling them after the specific extension is loaded to minimize the attack surface.
Audit Metadata