datasource-creator
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill's primary purpose is to generate TypeScript code and JSON configuration files for 'Flow' and 'OData' datasources. It uses the
dxs datasource generate-flowanddxs datasource generatecommands to create executable logic for the Datex Studio platform. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where it ingests data from external sources such as requirements briefs and schema metadata.
- Ingestion points: Requirements briefs (provided by other skills or users) and metadata retrieved via
schema-explorerare used to drive the generation of datasource fields and logic. - Boundary markers: The skill relies on structured input but does not explicitly define LLM-specific delimiters for untrusted data.
- Capability inventory: Includes
dxs configuration upsertfor persistent configuration changes anddxs odata executefor performing data queries. - Sanitization: The documentation (specifically in
references/odata-datasources.md) identifies injection risks and mandates the use of$utils.odataformatters (e.g.,formatNumber,formatString) to properly escape and validate all interpolated parameters, which is an industry-standard security practice.
Audit Metadata