read-execution-plan
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill includes instructions for using the
sqlcmdutility, specifically with the-y 0flag to handle large XML outputs. This is a standard practice for database administrators to retrieve full execution plan documents from a shell environment. - Privilege Escalation Considerations: The skill documentation notes the requirement for high-level permissions such as
VIEW DATABASE STATEand the execution ofALTER DATABASE SCOPED CONFIGURATIONto enable specific statistics. These are privileged operations necessary for the skill's intended functionality in performance diagnostics. - Indirect Prompt Injection Surface: The skill is designed to ingest and parse XML execution plan data generated by the SQL engine. While this data originates from an external source (the database), the skill uses specific XQuery filters to extract structured facts rather than processing the entire document as natural language, which minimizes the risk of the agent misinterpreting embedded query text.
Audit Metadata