oracle
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructional shell script examples for utilizing Oracle utilities such as rman, sqlplus, and Data Pump (expdp/impdp). These scripts are standard for database maintenance and administration tasks.
- [DYNAMIC_EXECUTION]: The PL/SQL reference material provides guidance on dynamic SQL execution using EXECUTE IMMEDIATE and DBMS_SQL, including security recommendations for their use.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies patterns for data ingestion through PL/SQL stored procedures and functions, which constitutes a potential attack surface.
- Ingestion points: PL/SQL parameters defined in examples/01-plsql-procedure.md and references/04-plsql-guide.md.
- Boundary markers: Bind variables are recommended and demonstrated in the dynamic SQL documentation to separate code from data.
- Capability inventory: The examples assume access to database execution environments and shell-based administrative utilities.
- Sanitization: The documentation explicitly advocates for the use of bind variables as a primary defense against SQL injection.
- [PERSISTENCE]: The backup strategy documentation provides examples for scheduling automated maintenance tasks using cron, a common method for ensuring operational persistence in database environments.
Audit Metadata