dt-migration

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing untrusted data (user-supplied classic DQL queries) to rewrite them into Smartscape DQL. This represents a potential vulnerability surface, though it is necessary for the skill's primary purpose.
  • Ingestion points: User-provided classic DQL queries (SKILL.md)
  • Boundary markers: None identified in the provided skill files
  • Capability inventory: Rewriting and generating DQL queries for execution (SKILL.md, references/migration-workflow.md)
  • Sanitization: No specific sanitization or validation of the input query strings is mentioned
  • [PROMPT_INJECTION]: The instructional content does not attempt to bypass safety filters, override agent behavior, or extract system prompts. The use of "IMPORTANT" and "CRITICAL" labels is limited to standard technical guidance.
  • [DATA_EXPOSURE]: No hardcoded credentials, sensitive file paths, or unauthorized network operations were detected in the instructions or code snippets.
  • [UNVERIFIABLE_DEPENDENCIES]: The skill does not include any requirements files, package installations, or remote script execution patterns. It suggests loading another skill from the same vendor (dt-dql-essentials) for syntax validation.
  • [OBFUSCATION]: All content is provided in plain text. No Base64 encoding, zero-width characters, or other hidden content techniques were found.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 09:30 PM