sql-injection-prevention
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains educational content and best practices for software developers to avoid SQL injection vulnerabilities. It provides accurate code examples (both vulnerable and secure) for Node.js, Laravel, Python, and Cloudflare D1.
- [INDIRECT_PROMPT_INJECTION]: As a code auditing skill, it is designed to ingest and process untrusted code from external sources which represents a potential injection surface.
- Ingestion points: External source code files or snippets provided to the agent for review (implied by the skill's purpose).
- Boundary markers: None explicitly defined in the skill instructions to delimit untrusted code.
- Capability inventory: No dangerous tool capabilities like network access, arbitrary file writing, or subprocess execution are defined in the frontmatter or skill body.
- Sanitization: The skill explicitly enforces input sanitization via parameterized bindings and prepared statements as a core instruction.
Audit Metadata