google-bigquery
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of shell commands through
npxto manage the authentication lifecycle and perform data operations in Google BigQuery. - [EXTERNAL_DOWNLOADS]: The skill fetches the
@useclawlink/clipackage from the NPM registry to provide the necessary tools for connecting the agent to Google BigQuery. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input by interpolating natural language strings and JSON payloads into CLI command arguments, creating a surface for indirect prompt injection.
- Ingestion points: User queries provided to the
actionscommand and JSON data provided to the--inputflag in theruncommand. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are included in the command templates.
- Capability inventory: The skill uses shell execution via
npxfor all operations defined inSKILL.md. - Sanitization: The skill does not describe any specific validation or sanitization mechanisms for the data passed to the CLI tools.
Audit Metadata