sql-query-explainer
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions as a text-based advisor for SQL development. It does not request or use any sensitive permissions, network access, or external code execution tools.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external data, which introduces a surface for indirect prompt injection. 1. Ingestion points: User-supplied SQL queries, natural language intent, and database EXPLAIN outputs (documented in SKILL.md). 2. Boundary markers: None explicitly defined to separate user data from instructions. 3. Capability inventory: The skill has no capabilities to execute code, write files, or make network requests. 4. Sanitization: None present. Assessment: The risk is negligible as the skill lacks any tools to execute instructions embedded within the processed data.
Audit Metadata