data-analysis-sql
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides templates to access and profile sensitive data fields including email addresses, phone numbers, and compensation details from employee records.\n
- Evidence: SQL queries in
SKILL.mdtargeting theemployeestable specifically foremail,phone, andsalarycolumns.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external database sources which could potentially contain malicious instructions intended to manipulate the agent's behavior.\n - Ingestion points: SQL queries in
SKILL.mdtargetingemployees,orders, anduserstables.\n - Boundary markers: Absent. No delimiters or instructions are provided to distinguish data from command instructions.\n
- Capability inventory: SQL execution and data processing/aggregation capabilities.\n
- Sanitization: No data validation or sanitization logic is implemented in the provided SQL templates or helper scripts.
Audit Metadata