database-engineer

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive documentation and best practices for database administrators and engineers. All provided SQL and code snippets serve as legitimate technical examples.
  • [SAFE]: The helper scripts located in the scripts/ directory (analyze-schema.sh, index-advisor.sh, migration-plan.sh) are boilerplate templates that define a CLI interface for database operations. They do not contain any hardcoded credentials, malicious network operations, or dangerous command execution logic.
  • [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface by providing shell scripts that accept user-defined arguments (e.g., database hosts, usernames, and passwords). However, the scripts are currently placeholders that only echo these parameters, presenting no immediate risk.
  • Ingestion points: CLI arguments in scripts/analyze-schema.sh, scripts/index-advisor.sh, and scripts/migration-plan.sh.
  • Boundary markers: None present in the script templates.
  • Capability inventory: Shell script execution.
  • Sanitization: Arguments are assigned to variables and used in echo statements without specialized escaping, which is acceptable for the template's current scope.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 08:52 PM