704-technologies-sql

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill requires the execution of Maven commands (e.g., './mvnw compile', 'mvn clean verify') to validate changes. These are standard development tools but involve running shell commands within the project environment.
  • [PROMPT_INJECTION]: The skill operates on untrusted data by reading and reviewing user-provided SQL schemas, migrations, and queries, creating a surface for indirect prompt injection.
  • Ingestion points: SQL schemas, migration files, and queries provided by the user (as described in the workflow of SKILL.md).
  • Boundary markers: Not present; the instructions do not require the use of delimiters when reading external files.
  • Capability inventory: Shell command execution via Maven and the Maven Wrapper (specified in the constraints of SKILL.md).
  • Sanitization: Not present; there are no explicit steps to sanitize or validate the content of processed SQL files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 04:25 PM
Security Audit — agent-trust-hub — 704-technologies-sql