electric-shapes
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or referenced materials. The skill focuses on standard API configuration for database synchronization.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines a mechanism for syncing external database records into the client environment, which represents a potential data ingestion surface.\n
- Ingestion points: Database table rows are synced via the
ShapeStreamandShapeclasses (documented inSKILL.md).\n - Boundary markers: No specific delimiters or warnings for embedded instructions are provided in the code examples.\n
- Capability inventory: The skill demonstrates data logging and transformation patterns; it does not contain any shell commands, file system writes, or unsafe dynamic execution capabilities.\n
- Sanitization: The skill advocates for the use of positional parameters (e.g.,
$1,$2) to prevent SQL injection at the database level.
Audit Metadata