mysql
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands for package management (apt, dnf), service control (systemctl), and database interactions (mysql CLI, mysqldump, xtrabackup).
- [PRIVILEGE_ESCALATION]: Instructions frequently use sudo to perform administrative tasks, granting the executing agent root-level authority on the host system.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a vulnerability surface by importing SQL data from local files (mysql < schema.sql).
- Ingestion points: Reads external content from schema.sql referenced in SKILL.md.
- Boundary markers: No delimiters or safety instructions are provided to the agent regarding the content of imported SQL files.
- Capability inventory: The skill has access to shell execution, file system modification, and full database administrative privileges.
- Sanitization: There is no validation or escaping of the imported SQL content before execution.
Audit Metadata