api-testing
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents a pattern for a 'SQL / Stored-Procedure Bridge' designed for test-data setup and cleanup in test environments. This involves executing raw SQL queries through a helper method
executeLocalProcedure.runSqlQuery(sql). While the documentation explicitly warns that this is a security risk in production, the provided example uses string interpolation for query building (e.g.,DELETE FROM users WHERE id = ${userId}), which is a pattern vulnerable to SQL injection if the input is not strictly controlled.
Audit Metadata