Skills
Navigate
skills/jeffallan/claude-skills/sql-pro/Gen Agent Trust Hub

sql-pro

Fail

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references an external documentation URL that is flagged as malicious by automated security scanners.
  • Evidence: https://jeffallan.github.io/claude-skills/skills/language/sql-pro/ found in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided SQL queries and schema definitions, which serve as ingestion points for potentially malicious instructions.
  • Ingestion points: User requests for SQL optimization, performance troubleshooting, and database design referenced in SKILL.md.
  • Boundary markers: Absent. The instructions do not specify that the agent should ignore instructions embedded within SQL comments or data strings.
  • Capability inventory: The skill instructs the agent to analyze execution plans (EXPLAIN ANALYZE) and suggest schema modifications, involving direct interaction with database environments.
  • Sanitization: Absent. There is no requirement or method provided for the agent to validate or escape the content of the SQL provided by the user before processing.
Recommendations
  • AI detected serious security threats
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 3, 2026, 09:21 PM