sql-object-impact-analysis
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that requires the agent to ingest and analyze untrusted content from repository files, such as SQL scripts and application source code, creating a potential vector for indirect prompt injection.\n
- Ingestion points: Repository files including SQL scripts (.sql), stored procedure definitions, views, functions, triggers, and application code (C#, Java, JS/TS, Angular, etc.).\n
- Boundary markers: The skill does not provide specific instructions to use delimiters or ignore instructions found within the analyzed code files.\n
- Capability inventory: The agent uses file-reading and search tools to compile an impact analysis report.\n
- Sanitization: No sanitization or validation of the ingested code content is performed.\n- [NO_CODE]: The skill consists entirely of markdown instructions and metadata, with no accompanying scripts, binaries, or executable files.
Audit Metadata