cdata-cli-python

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download Python wheel packages from the official vendor repository at maven.cdata.com. These files are platform-specific drivers required for the connector's functionality.
  • [COMMAND_EXECUTION]: Instructions include using curl for downloads, pip for installation, and executing a specific license activation utility (install-license.exe or install-license.sh) included with the package. These are standard administrative steps for the software's lifecycle.
  • [INDIRECT_PROMPT_INJECTION]: As a data connectivity skill, it facilitates the ingestion of external database content into the agent's context. This represents an attack surface for indirect prompt injection; however, the skill mitigates this by explicitly instructing the use of parameterized queries with ? placeholders to prevent injection attacks.
  • [DATA_EXPOSURE]: The skill describes using OAuthSettingsLocation to reference local files containing cached authentication tokens. This is a standard mechanism for maintaining persistent OAuth sessions and follows the vendor's established security model for credential management.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 04:45 AM