database-expert
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data during its 'Environment Detection' and 'Problem Category Analysis' phases, creating a potential vector for indirect prompt injection.
- Ingestion points: The skill explicitly instructs the agent to analyze connection strings (e.g., postgresql://, mysql://), database configuration files (postgresql.conf, my.cnf, mongod.conf), and ORM schema files (schema.prisma).
- Boundary markers: The instructions lack explicit boundary markers or directions to the agent to disregard potential instructions embedded within the analyzed configuration data or comments.
- Capability inventory: The skill is capable of generating SQL queries, architectural decisions, and ORM code snippets based on the ingested data.
- Sanitization: There is no mention of sanitizing or validating the contents of the detected environment files before processing.
Audit Metadata