db-explore
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to runmongoshcommands for database interaction. - [DATA_EXFILTRATION]: The skill provides instructions to query the
userscollection, which is explicitly described as containing player authentication data. Reading this information into the agent's context presents a data exposure risk. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it processes untrusted data from the database without sanitization.
- Ingestion points: Database results from collections such as
users,clans, andbasesare read into the context viamongosh. - Boundary markers: Absent; no delimiters are used to separate database output from instructions.
- Capability inventory: The skill utilizes the
Bashtool to execute commands. - Sanitization: Absent; no validation or filtering of the database content is performed before processing.
Audit Metadata