Edgedb

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.2

Overview

This appears to be a database helper, but it can run migrations, queries, and proxy requests without clear safety guardrails, so it needs review before installation.

Install only if you intend to let an agent administer an EdgeDB-backed system. Use least-privilege credentials, avoid production connections by default, require explicit approval for writes, migrations, and proxy requests, and prefer dry runs or previews before any durable database change.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 81% confidence
• Finding: The skill description is broad enough to match generic database or data-management requests, which can cause the agent to invoke this skill in situations the user did not specifically intend. Because the skill exposes query execution, migrations, and proxy capabilities, an over-broad trigger increases the chance of unintended access or modification of EdgeDB-backed systems.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The documentation advertises schema migrations, query execution, and direct proxy requests without prominent safeguards distinguishing read-only from write/destructive actions. In an agent setting, this can lead to silent execution of data-modifying operations, schema changes, or arbitrary API calls against a live database when the user may have expected inspection only.

VirusTotal

64/64 vendors flagged this skill as clean.