mz-sql-navigation
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the presence of the
mz-deploycommand-line utility on the system path to provide LSP-based functionality such as object resolution and symbol search. - [PROMPT_INJECTION]: The skill ingests and analyzes content from
.sqlfiles in the user's workspace, which is a vector for indirect prompt injection where malicious code comments or identifiers could attempt to manipulate agent logic. 1. Ingestion points: Workspace SQL files in an mz-deploy project. 2. Boundary markers: None explicitly mentioned in the skill instructions. 3. Capability inventory: Uses the language server for hover, definition resolution, and symbol inspection. 4. Sanitization: Relies on the internalmz-deployparser to validate project structure and syntax.
Audit Metadata