database-plan-cache
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill utilizes environment variables for database credentials, preventing hardcoded secrets.
- [COMMAND_EXECUTION]: SQL execution is performed via the
ibmiCLI. The tools are explicitly marked as read-only in the configuration, which limits the potential for unauthorized system changes. - [SAFE]: No evidence of obfuscation, data exfiltration, or malicious prompt injection was found. The skill's functionality is consistent with its documentation.
- [COMMAND_EXECUTION]: The database connection configuration includes
ignore-unauthorized: true. While this allows connections without valid SSL certificates, it is a known configuration choice for internal database management and does not constitute a malicious pattern in this context.
Audit Metadata