huawei-cloud-hetu-sql-check
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill performs static analysis of SQL statements locally using a custom recursive descent parser and tokenizer.
- [EXTERNAL_DOWNLOADS]: No external downloads or remote script executions were found. The skill documentation and scripts confirm that no additional Python packages are required and no data is sent externally.
- [DATA_EXFILTRATION]: No network activity, hardcoded credentials, or sensitive data access patterns were identified. The skill processes SQL text locally without connecting to clusters or external APIs.
- [COMMAND_EXECUTION]: The skill scripts do not employ unsafe subprocess calls,
eval(), oros.system()to execute user-provided input. Analysis is performed through string manipulation and tokenization. - [PROMPT_INJECTION]: The instructions do not contain bypass markers, override commands, or any patterns typical of prompt injection attempts.
- [OBFUSCATION]: No obfuscation techniques, such as Base64-encoded payloads, zero-width characters, or homoglyphs, were detected in the source code or markdown files.
Audit Metadata