oracle

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes instructional shell script examples for utilizing Oracle utilities such as rman, sqlplus, and Data Pump (expdp/impdp). These scripts are standard for database maintenance and administration tasks.
  • [DYNAMIC_EXECUTION]: The PL/SQL reference material provides guidance on dynamic SQL execution using EXECUTE IMMEDIATE and DBMS_SQL, including security recommendations for their use.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies patterns for data ingestion through PL/SQL stored procedures and functions, which constitutes a potential attack surface.
  • Ingestion points: PL/SQL parameters defined in examples/01-plsql-procedure.md and references/04-plsql-guide.md.
  • Boundary markers: Bind variables are recommended and demonstrated in the dynamic SQL documentation to separate code from data.
  • Capability inventory: The examples assume access to database execution environments and shell-based administrative utilities.
  • Sanitization: The documentation explicitly advocates for the use of bind variables as a primary defense against SQL injection.
  • [PERSISTENCE]: The backup strategy documentation provides examples for scheduling automated maintenance tasks using cron, a common method for ensuring operational persistence in database environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 04:40 AM