detecting-sql-injection-patterns

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill serves a legitimate security purpose, providing tools and documentation to audit codebases for SQL injection vulnerabilities.
  • [COMMAND_EXECUTION]: The skill includes a Python script (scripts/scan_sqli.py) that performs static analysis. It uses regular expressions to identify potential CWE-89 patterns in source code and generates a report. The script does not execute the code it scans and its environment is appropriately restricted via the tool manifest.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted source code from the local filesystem to identify vulnerabilities. * Ingestion points: The scan_file function in scripts/scan_sqli.py reads file contents from a user-provided path. * Boundary markers: The findings produced by the script include code snippets which are intended to be interpreted by the agent for remediation purposes. * Capability inventory: The skill uses Read, Glob, Grep, and Bash tools to scan files and run the Python analysis script. * Sanitization: The script limits snippets to 160 characters and identifies specific SQL keyword patterns, minimizing the likelihood of malicious code influencing the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 02:10 PM
Security Audit — agent-trust-hub — detecting-sql-injection-patterns