oci-billing-query
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the DuckDB installation script using a piped shell command (
curl https://install.duckdb.org | sh). This targets the official installation domain for a well-known database tool. - [EXTERNAL_DOWNLOADS]: Fetches the DuckDB installation script from
install.duckdb.organd interacts with a StarRocks database (MySQL-compatible) as specified by the user. - [COMMAND_EXECUTION]: The skill executes shell commands to install the DuckDB CLI, manage the local
~/.duckdbrcconfiguration file, and run SQL queries against OCI billing data. It also uses utility commands likehead,cat, andwcto inspect exported data. - [INDIRECT_PROMPT_INJECTION]: The skill processes OCI billing data from an external database, which represents a surface for indirect prompt injection.
- Ingestion points: OCI billing detail data is queried from StarRocks and exported to CSV files for analysis.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious content within the billing records.
- Capability inventory: The agent utilizes shell execution (
duckdb,cat,head,wc) and file presentation tools to handle the ingested data. - Sanitization: There is no explicit evidence of sanitization or validation of the data fields before they are presented to the agent for summary and analysis.
Audit Metadata