oracle-db-skills
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The repository includes a shell script,
scripts/apply-github-ruleset.sh, which is a utility for managing GitHub repository rulesets using the GitHub API. It correctly uses environment variables for token management. - [EXTERNAL_DOWNLOADS]: The documentation and container reference guides correctly point to well-known vendor resources, such as
container-registry.oracle.comfor official Oracle images andgithub.comfor repository management. These are established and trusted services. - [INDIRECT_PROMPT_INJECTION]: Documentation for features like
SELECT AIandDBMS_VECTOR(found inskills/features/select-ai.mdandskills/features/dbms-vector.md) acknowledges the risk of prompt injection from external data sources. The guides provide specific recommendations for sanitizing inputs and using least-privilege database views to mitigate these risks.
Audit Metadata