introspect
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to interact with database engines and fetch catalog information. This is consistent with its stated purpose of live database introspection. - [DATA_EXFILTRATION]: The skill accesses the
$DATABASE_URLenvironment variable for database connectivity. It includes instructions to redact credentials from logs and findings using aredactSecrets()function to prevent accidental exposure. - [PROMPT_INJECTION]: The skill processes untrusted metadata from external databases, creating an indirect prompt injection surface. Ingestion points: Database catalogs (Postgres, MySQL, Mongo, Cassandra) fetched via
Bashor MCP tools. Boundary markers: Not explicitly specified for the ingested metadata content. Capability inventory:Bash(shell access) andRead(file access) tools. Sanitization: Includes credential redaction but lacks specific sanitization for data retrieved from catalog queries.
Audit Metadata