doris-debug-materialized-view
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill references a local utility script,
./scripts/doris-debug, to access backend metrics via an HTTP endpoint. This is a common diagnostic pattern within the context of the Apache Doris database ecosystem. - Environment Variable Utilization: The use of
$BEto parameterize the backend host address follows standard configuration management practices. - Indirect Prompt Injection Surface: The skill processes diagnostic information from database logs (fe.audit.log) and SQL outputs (EXPLAIN, mv_infos). These serve as ingestion points for external data without explicit boundary markers. The capability inventory includes shell execution (./scripts/doris-debug) and SQL command execution. No explicit sanitization of the ingested diagnostic data is described, which is common for internal database tools.
Audit Metadata