confluent-cloud-flink-sql
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external sources and possesses command execution capabilities, creating a surface for indirect prompt injection. (1) Ingestion points: Processes external Kafka topic data via
confluent kafka topic consume(referenced in cli-reference.md) and local SQL files through shell command substitution (e.g.,$(cat repro.sql)in SKILL.md). (2) Boundary markers: No explicit delimiters or instructions to ignore embedded commands within ingested data were found. (3) Capability inventory: Includes execution of theconfluentCLI for resource management, Kafka topic operations, and Flink statement creation across all reference files. (4) Sanitization: No evidence of sanitization or validation of the content being passed into CLI commands was observed.
Audit Metadata