migrating-sql-to-dbt
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use common shell utilities (
cat,grep,find,xargs) to inspect the filesystem and search for table references within the project structure. It also utilizes thedbtCLI (dbt build,dbt show) to compile and execute data models as part of the validation workflow. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that involves reading and interpreting legacy SQL files, which represents an untrusted data ingestion surface.
- Ingestion points: The skill instructions (Step 1: Analyze Legacy SQL) direct the agent to read the content of external files using
cat <legacy_sql_file>. - Boundary markers: The instructions do not specify any delimiters or safety markers to differentiate between the SQL logic and potential malicious instructions embedded within the legacy files.
- Capability inventory: The agent has the capability to read project files, write new SQL/YAML files to the repository, and execute
dbt buildcommands. - Sanitization: There are no sanitization or validation steps mentioned for the content retrieved from the legacy SQL files before it is processed by the agent.
Audit Metadata