geobase-embeddings-catalogue-management
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides example
curlcommands for interacting with the Geobase project API host (${GEOBASE_PROJECT_URL}). These commands are used to perform metadata operations such as listing entries, updating visibility status, and deleting tables. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data that could potentially contain malicious instructions if the data source is compromised.
- Ingestion points: The
table_nameandp_table_nameparameters inGET,PATCH, andPOSTrequests, as well as the visibility boolean values. - Boundary markers: None explicitly defined in the prompt templates.
- Capability inventory: Performs network operations via
curland executes database mutations (PATCH/DELETE) via the PostgREST RPC and table interfaces. - Sanitization: None described in the instructions; the skill relies on the backend API's Row Level Security (RLS) and input validation.
Audit Metadata