testquery
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the use of
go run github.com/danicat/testquery@latestto execute the TestQuery utility. This command fetches and runs the tool directly from the author's GitHub repository. As GitHub is a well-known service and the resource belongs to the skill's author, this is considered standard vendor functionality. - [COMMAND_EXECUTION]: The skill provides shell commands for running the TestQuery utility to perform SQL queries against a local database. This behavior is necessary for the skill's primary purpose of test analytics.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of test execution logs.
- Ingestion points: The
outputcolumn in theteststable of thetestquery.dbdatabase. - Boundary markers: None explicitly defined in the provided SQL examples.
- Capability inventory: SQL query execution via the
test_queryMCP tool and shell-based command execution viago run. - Sanitization: None described; the skill relies on the agent's standard handling of tool output.
Audit Metadata