skills/jeremylongshore/tons-of-skills-marketplace/monitoring-database-transactions/Gen Agent Trust Hub
monitoring-database-transactions
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONING
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from database management system outputs. 1. Ingestion points: Database session and transaction data retrieved via psql, mysql, and mongosh CLI tools. 2. Boundary markers: Missing markers to distinguish between instructions and data in database outputs. 3. Capability inventory: The skill uses Bash (scoped to DB clients) and Write tools. 4. Sanitization: No validation or sanitization of database-sourced strings is performed.
- [METADATA_POISONING]: The script scripts/rollback_analyzer.py features a deceptive description that does not align with its functionality. Evidence: While the file header and scripts/README.md claim the script analyzes database rollback rates, the actual Python implementation performs a generic recursive filesystem scan to report on file sizes and types. This inconsistency between metadata and code could lead an agent to perform unexpected filesystem operations.
Audit Metadata