Data
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process data from external APIs, databases, and files, creating a surface for indirect prompt injection. (1) Ingestion points: API fetching, file reading, and database querying as detailed in
querying.mdandcleaning.md. (2) Boundary markers: The instructions do not specify the use of delimiters or clear separation between data and instructions when processing external content. (3) Capability inventory: SQL execution, file system access, network API requests, and Python code execution as described in the automation patterns. (4) Sanitization: The skill incorporates defensive measures such as parameterized queries (querying.md), schema validation (quality.md), and data type enforcement (cleaning.md). - [COMMAND_EXECUTION]: The skill provides templates and workflows for generating and executing SQL queries and Python automation scripts, which involves the dynamic assembly and execution of code based on user requirements.
Audit Metadata