mssql-writing-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides technical documentation and T-SQL templates focused on secure database design and management principles.\n- [DYNAMIC_EXECUTION]: The migration guidelines (references/migration-patterns.md) demonstrate standard administrative use of dynamic SQL (EXEC) to manage database constraints with system-generated names.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a code-generation surface where user requirements are translated into SQL scripts.\n
- Ingestion points: User-provided database specifications and logic requirements (SKILL.md, references/procedure-structure.md).\n
- Boundary markers: The methodology strictly separates users from base tables through role-scoped views and stored procedures, establishing mandatory database-level security boundaries.\n
- Capability inventory: The agent is guided to generate DDL and DML scripts to manage database state.\n
- Sanitization: The guidelines mandate stored procedures for all data mutations, which inherently supports parameterized queries and input validation, mitigating SQL injection risks in application logic.
Audit Metadata