data-storage
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the SQLite WASM binary from the well-known 'sql.js.org' domain to enable relational database functionality in the browser.- [DATA_EXFILTRATION]: Includes a 'syncWithServer' utility designed to transmit local data to a remote endpoint, which is a standard feature for offline-first applications.- [PROMPT_INJECTION]: Ingestion points: Data is ingested from external server responses in 'syncWithServer' and retrieved from storage in 'storage.get' (SKILL.md). Boundary markers: Absent. Capability inventory: 'fetch' for network operations and 'db.run/exec' for SQL execution (SKILL.md). Sanitization: No validation or escaping of external content before processing.
Audit Metadata