optimizing-query-text
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided SQL query text to perform performance optimizations.
- Ingestion points: SQL query text provided or pasted by the user as input to the agent (referenced in
SKILL.md). - Boundary markers: The skill instructs the agent to return only optimized SQL, but lacks specific instructions to disregard natural language commands that could be embedded within SQL comments or string literals.
- Capability inventory: The skill instructions do not require or reference any tool invocations, network operations, file system access, or command execution.
- Sanitization: No specific validation or sanitization steps are defined for the input SQL query text.
- [SAFE]: The skill's instructions are focused on logical SQL transformations and query tuning. It includes explicit semantic preservation rules and identifies unsafe optimizations (like changing UNION to UNION ALL) to ensure the agent maintains result integrity. No code execution, network exfiltration, or obfuscation patterns were detected.
Audit Metadata