skills/jeremylongshore/tons-of-skills-marketplace/detecting-sql-injection-patterns/Gen Agent Trust Hub
detecting-sql-injection-patterns
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves a legitimate security purpose, providing tools and documentation to audit codebases for SQL injection vulnerabilities.
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/scan_sqli.py) that performs static analysis. It uses regular expressions to identify potential CWE-89 patterns in source code and generates a report. The script does not execute the code it scans and its environment is appropriately restricted via the tool manifest. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted source code from the local filesystem to identify vulnerabilities. * Ingestion points: The
scan_filefunction inscripts/scan_sqli.pyreads file contents from a user-provided path. * Boundary markers: The findings produced by the script include code snippets which are intended to be interpreted by the agent for remediation purposes. * Capability inventory: The skill usesRead,Glob,Grep, andBashtools to scan files and run the Python analysis script. * Sanitization: The script limits snippets to 160 characters and identifies specific SQL keyword patterns, minimizing the likelihood of malicious code influencing the agent context.
Audit Metadata