carto-query-datawarehouse
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the
duckdbpackage vianpminreferences/activity-queries.mdto support local analysis of activity data. DuckDB is a legitimate, well-known, and trusted analytical library. - [INDIRECT_PROMPT_INJECTION]: The skill processes CARTO activity logs which may contain user-influenced strings, creating a potential surface for indirect prompt injection. This is a standard surface for data analysis skills.
- Ingestion points: The
activity,userList, andapiUsagetables are processed through DuckDB as described inreferences/activity-queries.md. - Boundary markers: No specific delimiters or boundary markers are defined in the instructions to prevent the agent from interpreting data as instructions.
- Capability inventory: The skill provides capabilities to execute sync and async SQL queries against a connected data warehouse as documented in
SKILL.md. - Sanitization: There are no explicit sanitization or validation steps mentioned for the data fields extracted from the activity logs.
Audit Metadata