sqlspec
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources such as SQL files, databases, and cloud storage.
- Ingestion points:
SQLFileLoaderreads SQL files from local or remote storage, and Storage Bridge methods (load_from_arrow,load_from_storage) ingest data from cloud providers. - Boundary markers: The documentation explicitly mandates the use of parameterized queries and the AST-based query builder instead of string concatenation to maintain query integrity.
- Capability inventory: The skill facilitates comprehensive database operations (read/write), local file access for SQL loading, and network connectivity for cloud storage integrations (S3, GCS, Azure).
- Sanitization: Employs
sqlglotfor AST validation and provides structured filter objects to sanitize and validate query parameters.
Audit Metadata