sql
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and review SQL code, which is a source of untrusted data. It addresses this risk by mandating strict safety standards, such as parameterized-only queries and static allowlisting for identifiers, to define clear boundaries between code and data (SKILL.md, references/sql-review.md).
- [EXTERNAL_DOWNLOADS]: The skill recommends the use of well-known development tools and services for code validation and behavior testing. This includes the installation of sqlfluff (Python) and squawk-cli (Node.js), and the use of official or community-standard Docker images for database testing (SKILL.md, references/sql-review.md). These references are documented neutrally as part of standard developer workflows.
Audit Metadata