skills/impertio-studio/mariadb-claude-skill-package/mariadb-errors-encoding-and-collation/Gen Agent Trust Hub
mariadb-errors-encoding-and-collation
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [SAFE]: The skill provides legitimate technical instructions for MariaDB administration, including SQL queries for diagnosis and correction of encoding issues. All external links point to official MariaDB documentation.
- [COMMAND_EXECUTION]: The skill includes instructions for executing shell commands such as
mariadb-dumpandmariadbfor database backup and restoration. These are standard administrative tools and are used here for their intended purpose in a safe manner. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with database metadata, creating a theoretical injection surface. 1. Ingestion points:
information_schema.COLUMNSandinformation_schema.TABLES(Example 11, 12, 13). 2. Boundary markers: None mentioned for metadata ingestion. 3. Capability inventory:ALTER TABLEandSET GLOBALSQL commands, plusmariadb-dumpshell execution. 4. Sanitization: Basic backtick escaping is used in generated SQL strings for table names. - [METADATA_POISONING]: The author name in
SKILL.md(OpenAEC-Foundation) differs from the provided developer name (impertio-studio). This metadata inconsistency is noted but appears to be a naming variation rather than a deceptive attempt.
Audit Metadata