cli-default
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines an interface for the
agentic-dbCLI tool. It instructs the agent to execute shell commands for context management, authentication via tokens, and database operations. The commands are designed for non-interactive use using the--tty falseflag to ensure parseable JSON output. - [SAFE]: The skill documents standard database management functionality. It includes a surface for indirect prompt injection through search and retrieval commands (
agentic-db searchandagentic-db ask), which is inherent to its intended use case. Analysis of this surface reveals: 1. Ingestion points: Results from database queries and RAG-based answers (e.g., inSKILL.mdandreferences/chunk.md). 2. Boundary markers: None specified in the instructions to delimit retrieved content. 3. Capability inventory: The agent has extensive permissions to create, update, and delete records across 91 tables including contacts, tasks, and system messages. 4. Sanitization: Not explicitly defined in the skill logic.
Audit Metadata