hackathon-mock-data-generator
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to generate shell commands and database scripts (e.g., PostgreSQL
INSERTandTRUNCATEstatements) for users to populate their development environments. These operations are essential to the skill's primary purpose of providing seed data for applications. - [PROMPT_INJECTION]: The skill processes external inputs such as
data_schemaandmvp_demo_flow. This creates a surface for indirect prompt injection where an attacker could provide a schema containing instructions to alter the script generation logic. The skill lacks explicit boundary markers for these inputs, but the risk is consistent with general code generation tasks.
Audit Metadata