matlab-use-database
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill mitigates credential exposure by instructing the use of getSecret and setSecret functions for managing database passwords and connection strings instead of hardcoding sensitive information.
- [SAFE]: The instructions establish a robust safety boundary by requiring the agent to seek explicit user confirmation before generating or executing potentially destructive SQL commands such as DROP, DELETE, or TRUNCATE.
- [SAFE]: The skill promotes the use of databasePreparedStatement for JDBC connections to prevent SQL injection when incorporating user-provided values into queries.
- [SAFE]: High-performance multithreaded patterns using parfeval and Parallel Computing Toolbox follow standard developer workflows and do not introduce atypical remote code execution risks.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an inherent vulnerability surface by ingesting data from external relational databases. 1. Ingestion points: sqlread, fetch, and ormread functions. 2. Boundary markers: No explicit delimiters or instruction-bypass warnings are defined for retrieved data. 3. Capability inventory: The agent has the ability to execute, sqlwrite, and sqlupdate. 4. Sanitization: No specific filtering is recommended for data retrieved from the database before LLM processing. This risk is characteristic of the skill's primary utility.
Audit Metadata