generating-stored-procedures

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Python subprocess.run module to interact with database client tools such as psql, mysql, and sqlcmd. These tools are invoked in scripts/database_connection_test.py and scripts/stored_procedure_deployer.py for connectivity testing and SQL deployment. The implementation uses list-based arguments to prevent shell injection, representing a standard and secure way to interact with database CLIs.
  • [SAFE]: A dedicated validation script, scripts/stored_procedure_syntax_validator.py, is provided to perform static analysis on the generated SQL. This script checks for common syntax errors and security risks, such as insecure PostgreSQL SECURITY DEFINER configurations or potential SQL injection patterns, before the code is deployed to a database.
  • [SAFE]: The skill includes extensive documentation in the references/ directory covering security guidelines, optimization techniques, and platform-specific best practices for PostgreSQL, MySQL, and SQL Server. This provides the agent with the necessary context to generate secure and performant database code.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 02:06 PM