explore
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a wrapper script (
scripts/run.py) to execute theuvcommand-line tool. This is the intended mechanism for running theexmergo-dex-coreengine and managing its dependencies. - [DYNAMIC_EXECUTION]: The skill dynamically installs and updates its core engine and optional feature extras (such as
scikit-learnfor clustering orMetricFlowfor semantic analysis) using theuvpackage manager. This process is restricted to pinned versions and official or bundled sources. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data and metadata from warehouses (table names, column descriptions, query results). While this creates an attack surface for indirect prompt injection if the processed data contains malicious instructions, the skill mitigates this by using structured JSON output envelopes and providing specific instructions to the agent on how to parse the results safely. Evidence:
- Ingestion points: Metadata and data fetched via
inventory,map,profile, andquerycommands. - Boundary markers: Tool output is encapsulated in structured JSON envelopes.
- Capability inventory: Shell execution via
uv, file writing to the.dex/cache, and network operations through established database connectors. - Sanitization: The underlying engine implements PII detection, masking, and cost-guarding logic.
Audit Metadata