sql-pro
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected in the skill content.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted database schemas, query statistics, and external data sources, creating a potential surface for indirect prompt injection.
- Ingestion points: SQL schemas, database statistics, and query execution plans (identified in the 'Instructions' section of SKILL.md).
- Boundary markers: The skill does not define explicit delimiters for separating user-provided data from instructions.
- Capability inventory: The instructions focus on generating SQL queries and providing architectural advice; no shell commands or network operations are included in the skill itself.
- Sanitization: The skill explicitly directs the agent to adhere to 'SQL injection prevention and secure coding practices' as a behavioral trait.
Audit Metadata