atlas-redshift
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download a prerequisite skill and its reference files from 'https://atlasgo.io/skills/atlas/SKILL.md' if they are missing from the local environment. This domain is the official website for the Atlas project managed by the vendor (Ariga), and the download is required for the intended functionality of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process database schema definitions and migration scripts provided by the user, which presents an inherent surface for indirect prompt injection.
- Ingestion points: Data is read from HCL schema files (.rs.hcl), SQL migration files (.sql), and testing files (*.test.hcl) as specified in SKILL.md and references/hcl.md.
- Boundary markers: There are no explicit delimiters or specific 'ignore' instructions recommended for the ingestion of these file contents.
- Capability inventory: The skill utilizes the 'atlas' CLI to perform operations including 'schema apply', 'migrate diff', and 'schema test', which can modify database states and execute SQL code.
- Sanitization: The skill does not provide instructions for sanitizing or escaping the content of these files; it relies on the underlying Atlas CLI tool to correctly parse and validate the HCL and SQL syntax.
Audit Metadata