database-designer
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions and metadata do not contain any patterns typical of prompt injection, such as attempts to override agent constraints, bypass safety filters, or extract system prompts.
- [DATA_EXFILTRATION]: No network operations (e.g., curl, requests, sockets) or access to sensitive local file paths (e.g., .ssh, .aws, .env) were detected. The scripts operate exclusively on local input files provided via command-line arguments.
- [REMOTE_CODE_EXECUTION]: The skill does not download external scripts or packages. It relies entirely on the Python standard library and does not use dangerous functions like eval() or exec() to process input data.
- [COMMAND_EXECUTION]: The skill provides Python scripts intended for local execution. These scripts are well-documented and do not involve unsanitized subprocess calls or other vectors for arbitrary command injection.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or passwords were found. The skill does not instruct the user to store or handle credentials insecurely.
Audit Metadata