ducklake
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
ducklakeextension within DuckDB and fetches example data fromblobs.duckdb.org. These operations target the official infrastructure of the DuckDB project. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to ingest data from external sources, which is a standard feature of the database tool.
- Ingestion points: Data is loaded into tables from external URLs and local paths (e.g.,
FROM 'https://...'inSKILL.md). - Boundary markers: None explicitly provided in the skill instructions.
- Capability inventory: The skill uses DuckDB SQL capabilities to read/write files and perform maintenance tasks (detailed in
SKILL.mdandreferences/maintenance.md). - Sanitization: Relies on the underlying DuckDB engine's data parsing logic.
- [COMMAND_EXECUTION]: Provides standard CLI examples for opening databases using the
duckdbcommand-line interface. - [DATA_EXFILTRATION]: While the skill describes connecting to external PostgreSQL and SQLite catalogs, these are standard database operations for a lakehouse format and do not involve unauthorized data movement.
Audit Metadata