codeguard-sql
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
bash -cto find SQL files and pipe them to thesqlflufftool viaxargs. These commands are scoped to the local repository and are intended for code quality verification. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the local file system, creating a potential vector for indirect prompt injection.
- Ingestion points: The skill reads file paths and content from
.sqlfiles usingfindandsqlfluff lint(SKILL.md, Step 4). - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions within the processed data or tool output.
- Capability inventory: The skill can execute shell commands and modify local files through the
sqlfluff fixcapability (SKILL.md, Step 6). - Sanitization: The skill does not describe any specific sanitization or filtering logic for the output generated by the linting tool before it is processed by the agent.
Audit Metadata