sql-server-dba-dev-expert
Warn
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill provides a SQL template for database security hardening that includes a hardcoded password.
- Evidence: The SQL snippet
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'SecureP@ssw0rd#123!';inSKILL.mdcontains a specific, hardcoded credential string. - [COMMAND_EXECUTION]: Instructions include high-privilege administrative SQL commands that can significantly alter system state or impact data integrity.
- Evidence: The skill provides commands such as
ALTER LOGIN sa DISABLE,DROP, andDBCC CHECKDB ([AF.ECT.Database], REPAIR_ALLOW_DATA_LOSS). - Risk: The use of
REPAIR_ALLOW_DATA_LOSSis a high-risk operation that can lead to permanent data deletion if not executed with extreme caution. - [EXTERNAL_DOWNLOADS]: The skill metadata contains instructions to download resources from an external provider.
- Evidence: The
install_commandinmetadata.jsonusescurlto fetch the skill content fromraw.githubusercontent.com. - [DATA_EXFILTRATION]: The skill defines access patterns for highly sensitive military Personnel Identifiable Information (PII).
- Evidence: Instructions include schema details and query patterns for accessing
member_ssnandEDIPINfields within theForm348andcore_Userstables. - Risk Factor: While encryption is discussed, the intended use of the skill involves processing and querying sensitive personnel records, creating a significant data exposure surface.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to its processing of external database content.
- Ingestion points: The agent is instructed to read and process data from the
AF.ECT.Database, specifically theForm348case records. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the database data are provided in the skill instructions.
- Capability inventory: The skill possesses broad database permissions, including the ability to execute administrative commands and update records.
- Sanitization: While the provided SQL templates use parameters for standard queries, there is no explicit sanitization for potential instructions embedded within the processed records.
Audit Metadata