database-optimizer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze database execution plans (EXPLAIN output). This represents a potential surface for indirect prompt injection if metadata such as table or column names contain malicious instructions, though this risk is inherent to the analysis task.\n
- Ingestion points: Database engine tool output (execution plans) referenced in the Core Workflow.\n
- Boundary markers: The skill uses structured Markdown templates and specific output templates to separate data from instructions.\n
- Capability inventory: SQL execution for performance diagnostics, indexing, schema modification, and system configuration tuning.\n
- Sanitization: The skill does not explicitly define sanitization routines for the analysis of database-generated text.\n- [PRIVILEGE_ESCALATION]: The instructions include commands such as
ALTER SYSTEMandSET GLOBALto modify database server parameters. These administrative operations are standard practices within the expected scope of a senior database optimizer role.
Audit Metadata