sqlmodel
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill includes a utility script
scripts/generate_crud.pythat dynamically generates Python code for CRUD (Create, Read, Update, Delete) operations and FastAPI routers based on user-provided model names. This script writes generated content directly to the local filesystem (e.g.,app/crud/andapp/routers/directories). - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates patterns for building applications that ingest untrusted user data and provides scripts with system-modifying capabilities.
- Ingestion points: Untrusted data enters the application context through FastAPI request models defined in
references/integration.mdandreferences/models.md(e.g.,UserCreateandUserUpdate). - Boundary markers: The documentation recommends using Pydantic for input validation and SQLModel's built-in parameterized queries, which serve as delimiters between data and commands.
- Capability inventory: The skill provides scripts that can write new Python files to the filesystem (
scripts/generate_crud.py) and modify or delete database schemas (scripts/init_db.py). - Sanitization: The instructions emphasize security best practices such as avoiding string formatting in queries and using environment variables for sensitive configuration.
Audit Metadata