db
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is a massive library of documentation and code examples for Oracle Database operations. It specifically includes defensive patterns for AI agents, such as intent disambiguation, destructive operation guards, and SQL injection avoidance.
- [INDIRECT_PROMPT_INJECTION]: The skill supports mapping natural language to SQL, which creates an indirect prompt injection surface. The evidence chain is as follows: (1) Ingestion points: User prompts processed in
agent/nl-to-sql-patterns.mdandfeatures/select-ai.md. (2) Boundary markers: Present inagent/intent-disambiguation.md, which instructs the agent to clarify ambiguous or destructive intents. (3) Capability inventory: SQL execution capabilities documented inappdev/python-oracledb.mdandords/ords-architecture.md. (4) Sanitization: Extensively covered insql-dev/dynamic-sql.mdandagent/safe-dml-patterns.mdviaDBMS_ASSERTand bind variables. This risk is inherent to the skill's primary purpose and is properly mitigated by the provided safety guidelines. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for pulling container images from
container-registry.oracle.comand cloning software fromgithub.com. These are trusted organizations and services, and the references are made in a neutral, instructional context.
Audit Metadata