apexlang-compile
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate-apex-app.shexecutes a command defined by theSQLCL_BINenvironment variable. The script verifies that the path exists and is executable before proceeding.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied application directories and returns the validator's output to the agent context.\n - Ingestion points: File content from the directory passed as an argument to
scripts/validate-apex-app.shis processed by theapex validatecommand.\n - Boundary markers: The script does not utilize specific delimiters to wrap the command output when it is returned to the agent context.\n
- Capability inventory: The script performs file system reads and executes the binary specified in
SQLCL_BIN.\n - Sanitization: The script implements robust sanitization of the application directory path to prevent SQLcl command injection by rejecting characters like double quotes, backslashes, and newlines.
Audit Metadata