schema-mapper
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from external database schemas or dbt project files to generate documentation and SQL queries.
- Ingestion points: Database metadata such as table names, column names, and constraints are ingested via the
sqlalchemy.inspectmodule. The skill also mentions extracting schema from dbt project files (dbt_project.ymlandmodels/directory). - Boundary markers: The instructions do not define boundary markers or provide specific directives to the agent to ignore instructions that might be embedded within the database metadata or dbt documentation.
- Capability inventory: The skill executes Python code that performs database connections via
sqlalchemy, executes SQL queries, and writes various output files to the local filesystem (e.g.,data_dictionary.csv,schema_erd.mmd,schema_quick_reference.md). - Sanitization: Metadata retrieved from external sources is interpolated into SQL join patterns and Mermaid ERD diagrams without explicit sanitization or escaping mechanisms.
- [COMMAND_EXECUTION]: The skill provides multiple Python code blocks intended for execution by the agent to discover schemas, extract metadata, and generate reports.
Audit Metadata