questdb-tsbs-benchmark
Fail
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
sudoextensively for administrative system modifications, including updating package repositories, installing the Docker engine, and managing binaries in/usr/local/. - [COMMAND_EXECUTION]: Orchestrates the compilation and execution of benchmarking utilities (
tsbs_generate_data,tsbs_load_questdb) after cloning the source code at runtime. - [EXTERNAL_DOWNLOADS]: Downloads system-level software and configuration keys from well-known trusted sources, including Docker's official distribution site and Google's Go language repository (
go.dev). - [EXTERNAL_DOWNLOADS]: Clones the benchmarking suite directly from the author's official GitHub repository (
github.com/questdb/tsbs) for local build and execution.
Recommendations
- HIGH: Downloads and executes remote code from: https://go.dev/dl/go1.22.5.linux-amd64.tar.gz - DO NOT USE without thorough review
Audit Metadata