sql-query-generation
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted natural language input from users to generate SQL commands without sufficient security boundaries.
- Ingestion points: The skill ingests user input as natural language requests to be translated into database queries (described in SKILL.md).
- Boundary markers: There are no instructions for the agent to use delimiters or ignore instructions embedded within the user's natural language request.
- Capability inventory: The skill allows the agent to generate complex SELECT queries, perform DDL operations like CREATE INDEX, and execute analysis using EXPLAIN ANALYZE (which runs the query on some platforms).
- Sanitization: The instructions do not provide guidelines for validating or escaping user input before it is incorporated into the SQL query generation process.
Audit Metadata