motherduck-security-governance
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for security best practices, isolation boundaries, and compliance tracking within the MotherDuck platform.
- [COMMAND_EXECUTION]: The skill includes SQL audit queries designed to validate the security state of a MotherDuck environment, such as
MD_ALL_DATABASES(),SHOW ALL ROLES, andOWNED_SHARES. These are platform-native queries used for their intended governance purpose. - [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for evaluating user-provided requirements against documented controls. While this involves processing external data, the skill lacks high-risk capabilities like network exfiltration or local file system writes that would escalate this vulnerability surface.
Audit Metadata