database-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and best practices for database administrators and engineers. All provided SQL and code snippets serve as legitimate technical examples.
- [SAFE]: The helper scripts located in the
scripts/directory (analyze-schema.sh,index-advisor.sh,migration-plan.sh) are boilerplate templates that define a CLI interface for database operations. They do not contain any hardcoded credentials, malicious network operations, or dangerous command execution logic. - [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface by providing shell scripts that accept user-defined arguments (e.g., database hosts, usernames, and passwords). However, the scripts are currently placeholders that only echo these parameters, presenting no immediate risk.
- Ingestion points: CLI arguments in
scripts/analyze-schema.sh,scripts/index-advisor.sh, andscripts/migration-plan.sh. - Boundary markers: None present in the script templates.
- Capability inventory: Shell script execution.
- Sanitization: Arguments are assigned to variables and used in echo statements without specialized escaping, which is acceptable for the template's current scope.
Audit Metadata