matlab-write-database

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues or malicious patterns were detected. The skill promotes secure coding practices such as connection management and transaction atomicity.
  • [CREDENTIALS_UNSAFE]: The documentation includes explicit rules to avoid hardcoded credentials, directing users to use getSecret or setSecret for authentication (as seen in the 'Critical Rules' in SKILL.md).
  • [PROMPT_INJECTION]: The skill identifies and mitigates indirect prompt injection risks (Category 8 surface) by providing detailed instructions on SQL prepared statements.
  • Ingestion points: MATLAB tables and variables used in sqlwrite, sqlupdate, and execute across all knowledge cards (e.g., reference/cards/sqlwrite-sqlupdate.md).
  • Boundary markers: Instruction to use databasePreparedStatement in reference/cards/prepared-statements.md establishes boundaries for untrusted data.
  • Capability inventory: Database write and execution capabilities provided by the evaluate_matlab_code tool as listed in manifest.yaml.
  • Sanitization: Recommends using databasePreparedStatement to ensure SQL parameters are correctly escaped and handled by the database driver.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 08:23 AM