finance-ddl-design
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze metadata and sample data from external databases, which represents a potential attack surface if the database content is maliciously crafted.\n
- Ingestion points: Results from exploration queries targeting
information_schema,pg_catalog, and system columns, as well as sample rows from user databases, as described inreferences/exploration.md.\n - Boundary markers: The skill mandates a structured evidence-based reasoning framework (
OBSERVED,INFERRED,CONFIRMED) inSKILL.mdandreferences/data-contract.mdto ensure that raw metadata does not bypass review.\n - Capability inventory: The skill can generate and, with explicit user permission, execute SQL DDL commands across multiple database dialects (MySQL, PostgreSQL, ClickHouse, Doris, etc.) as documented in
references/partitioning.md.\n - Sanitization: Instructions in
references/exploration.mdrequire query budget limits and data sampling restrictions to prevent excessive data exposure.\n- [COMMAND_EXECUTION]: The skill generates complex SQL DDL scripts and supports their execution against connected databases upon explicit user request.\n - Evidence: The skill defines a complete workflow for generating Dialect-specific DDL for schema creation, partitioning, and migration in
SKILL.mdandreferences/partitioning.md.\n- [EXTERNAL_DOWNLOADS]: The skill references documentation and open standards from public GitHub repositories for its data contract and SQL styling guidelines.\n - Evidence:
references/external-standards.mdprovides links togithub.com/bitol-io/open-data-contract-standardandgithub.com/TFMV/datacontract-specificationwhich are used as reference architectures for the skill's deliverables.
Audit Metadata