mariadb-errors-slow-queries
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration were detected. The skill provides high-quality technical guidance for database performance tuning and correctly warns against unsafe practices like running mutations as dry runs.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of database slow query logs, which contain untrusted SQL text that could serve as a vector for indirect prompt injection. This is a known risk inherent to the primary purpose of log analysis tools. Evidence:
- Ingestion points: Reads MariaDB slow query logs from path /var/log/mysql/mariadb-slow.log (SKILL.md, references/examples.md).
- Boundary markers: No explicit markers or delimiters are provided for the log content.
- Capability inventory: Includes shell command execution (pt-query-digest, mariadb-dumpslow, ssh) and MariaDB SQL execution (SKILL.md).
- Sanitization: No explicit sanitization or filtering of the raw SQL text in logs is performed before processing.
Audit Metadata