database-normalization
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided database schemas to offer normalization advice. This represents a potential indirect prompt injection surface where malicious instructions could be embedded within the untrusted schema data provided by a user.
- Ingestion points: User-supplied database schemas, table definitions, and modeling questions processed via the skill's instructions.
- Boundary markers: The skill instructs the agent to ground its answers in the provided reference files, which acts as a logical constraint, although no explicit delimiters for user input are specified.
- Capability inventory: The skill does not possess capabilities for file writing, arbitrary command execution, or network operations.
- Sanitization: No explicit sanitization or validation of user-provided schema strings is performed before processing.
Audit Metadata