apexlang-26-2
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the helper scripts
validate-apex-app.shanddeploy-apex-app.shwhich are designed to wrap the Oracle SQLcl CLI tool. These scripts execute the binary path specified in the user-providedSQLCL_BINenvironment variable. - [INDIRECT_PROMPT_INJECTION]: The shell scripts ingest a user-supplied directory path as a command-line argument, creating a potential surface for indirect injection.
- Ingestion points: The scripts
scripts/validate-apex-app.shandscripts/deploy-apex-app.shaccept an<app-directory>argument. - Boundary markers: The scripts use shell heredocs (
<<SQLCL_COMMANDS) to wrap command logic, separating the input from the executable instructions. - Capability inventory: The skill is capable of executing shell commands and performing database imports/validations through the SQLcl interface.
- Sanitization: The scripts implement robust input validation that checks for and rejects directory paths containing double quotes, backslashes, or newline characters, effectively preventing shell injection and breakout attempts.
Audit Metadata