sqldb-cli
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Dynamic SQL Execution: The skill generates and executes T-SQL queries based on user input, including the use of
sp_executesqlfor dynamic discovery. While this is a standard pattern for database tools, it requires careful construction of queries to avoid unintended execution. - Indirect Prompt Injection Surface: The skill ingests data from SQL database queries to provide responses to the user. This creates a potential surface for indirect prompt injection if the database contains untrusted data that could influence the agent's behavior.
- Command Execution: The skill utilizes command-line tools such as
sqlcmdand the Azure CLI (az rest) to interact with database endpoints and management APIs. This behavior is expected and necessary for the skill's operational purpose.
Audit Metadata