cdata-cli-python
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download Python wheel packages from the official vendor repository at
maven.cdata.com. These files are platform-specific drivers required for the connector's functionality. - [COMMAND_EXECUTION]: Instructions include using
curlfor downloads,pipfor installation, and executing a specific license activation utility (install-license.exeorinstall-license.sh) included with the package. These are standard administrative steps for the software's lifecycle. - [INDIRECT_PROMPT_INJECTION]: As a data connectivity skill, it facilitates the ingestion of external database content into the agent's context. This represents an attack surface for indirect prompt injection; however, the skill mitigates this by explicitly instructing the use of parameterized queries with
?placeholders to prevent injection attacks. - [DATA_EXPOSURE]: The skill describes using
OAuthSettingsLocationto reference local files containing cached authentication tokens. This is a standard mechanism for maintaining persistent OAuth sessions and follows the vendor's established security model for credential management.
Audit Metadata