advanced-alchemy-database-seeding
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external JSON fixture files via the
open_fixtureandopen_fixture_asyncfunctions. While the primary purpose is database seeding, processing untrusted data files creates a potential attack surface where malicious instructions could be embedded in the data. - Ingestion points: The skill reads JSON fixture files from a dedicated directory as described in
SKILL.md. - Boundary markers: No specific boundary markers or "ignore embedded instructions" warnings are defined for the agent when processing these files.
- Capability inventory: The skill uses repository operations (
add_many,upsert_many) to perform bulk writes to a database, which involves file system or network operations depending on the database backend. - Sanitization: There are no instructions for sanitizing or validating the content of the fixture files before they are processed by the agent.
Audit Metadata