maravilla-db
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides methods to query and retrieve data from a document database (
db.find,db.findOne,db.findSimilar). Data stored in the database is considered untrusted and may contain malicious instructions designed to influence the agent's behavior when processed. - Ingestion points: Data enters the agent's context through query results in
SKILL.md(e.g.,const active = await db.find('users', { active: true });). - Boundary markers: The documentation does not specify the use of delimiters or 'ignore instructions' warnings when processing retrieved data.
- Capability inventory: The skill itself manages database operations (CRUD), and associated skills referenced in the documentation (
maravilla-config,maravilla-events) suggest capabilities for system configuration and event handling. - Sanitization: There are no explicit instructions for sanitizing or escaping the content retrieved from the database before it is used in subsequent prompts.
Audit Metadata