oci-billing-query

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the DuckDB installation script using a piped shell command (curl https://install.duckdb.org | sh). This targets the official installation domain for a well-known database tool.
  • [EXTERNAL_DOWNLOADS]: Fetches the DuckDB installation script from install.duckdb.org and interacts with a StarRocks database (MySQL-compatible) as specified by the user.
  • [COMMAND_EXECUTION]: The skill executes shell commands to install the DuckDB CLI, manage the local ~/.duckdbrc configuration file, and run SQL queries against OCI billing data. It also uses utility commands like head, cat, and wc to inspect exported data.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes OCI billing data from an external database, which represents a surface for indirect prompt injection.
  • Ingestion points: OCI billing detail data is queried from StarRocks and exported to CSV files for analysis.
  • Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious content within the billing records.
  • Capability inventory: The agent utilizes shell execution (duckdb, cat, head, wc) and file presentation tools to handle the ingested data.
  • Sanitization: There is no explicit evidence of sanitization or validation of the data fields before they are presented to the agent for summary and analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 07:51 AM