The Agent Skills Directory

[Data Exposure & Exfiltration] (SAFE): The skill defines a local database at ~/.multishot/database.sqlite. While it includes a credentials table, the schema explicitly documentation states that values should be references to safeStorage rather than plaintext, which is a secure design choice.\n- [Indirect Prompt Injection] (SAFE): The database stores potentially untrusted content such as agent prompts and output logs. The skill mitigates this risk by demonstrating parameterized queries (db.prepare(...).get(?)) in its usage examples. 1. Ingestion points: output_logs and agents tables in SKILL.md. 2. Boundary markers: Not specified in schema. 3. Capability inventory: SQLite database access via better-sqlite3. 4. Sanitization: Usage examples demonstrate parameterized queries to prevent injection.\n- [Unverifiable Dependencies] (SAFE): The skill references better-sqlite3, which is a standard and well-known Node.js library for SQLite operations.

database-schema