polardbx-plan-analysis
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured framework for interpreting PolarDB-X execution plans. The content is purely instructional and descriptive, focusing on database internals, operator taxonomy, and semantic analysis.
- [NO_CODE]: The skill does not include any executable scripts, shell commands, or package dependencies. All logic is implemented through markdown-based instructions for the AI agent.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection (Category 8) because it is designed to process external, untrusted data (SQL queries and database execution plans). However, the skill lacks any dangerous capabilities—such as network exfiltration, file system access, or shell execution—that would allow an attacker to exploit this surface. The risk is evaluated as safe under the intended use case.
Audit Metadata