perfetto-sql
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the trace_processor script from the official Perfetto project URL (https://get.perfetto.dev/trace_processor).
- [REMOTE_CODE_EXECUTION]: Executes a downloaded remote script locally. This is standard procedure for the official Perfetto tool suite and the source is a trusted service.
- [COMMAND_EXECUTION]: Uses chmod to set execution permissions and runs the trace_processor command with SQL input strings provided by the user.
- [PROMPT_INJECTION]: The skill processes untrusted user input to perform data analysis, creating a surface for indirect prompt injection (Category 8). 1. Ingestion points: natural language intent and SQL queries. 2. Boundary markers: Absent. 3. Capability inventory: shell execution via trace_processor. 4. Sanitization: Absent; the execution protocol allows running user-provided SQL without modification.
Audit Metadata