databricks-dbsql
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides documentation and examples for the
EXECUTE IMMEDIATEstatement inreferences/sql-scripting.md. This feature allows for the construction and execution of dynamic SQL at runtime, which is a standard administrative and engineering capability within the Databricks platform. - [INDIRECT_PROMPT_INJECTION]: The skill documents surface areas for indirect prompt injection in
references/ai-functions.md, specifically through theread_filesfunction (which ingests data from cloud storage and volumes) and thehttp_requestfunction (which processes external API responses). These functions could potentially ingest untrusted content that might influence an agent's behavior during data enrichment tasks. - Ingestion points: External data enters the context via
read_files,http_request, andremote_queryoperations as documented inreferences/ai-functions.md. - Boundary markers: The provided documentation does not explicitly define prompt delimiters for these ingestion points, though it mentions the
ai_maskfunction for PII redaction. - Capability inventory: The skill documents capabilities for network operations via
http_requestand file write operations via SQLINSERTandMERGEcommands. - Sanitization: The skill highlights the
ai_maskfunction as a mechanism for sanitizing sensitive data (PII) before further processing.
Audit Metadata