polardbx-sql
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted user data, such as SQL access patterns, table definitions, and business logic descriptions, to generate database recommendations and SQL scripts. This creates a vulnerability surface where malicious instructions could be embedded in the user-provided content.
- Ingestion points: User-supplied database schemas, SQL queries, and access patterns are processed and analyzed in
SKILL.mdandreferences/partition-design-best-practice.mdto inform partition design decisions. - Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within the user's data.
- Capability inventory: The skill generates powerful DDL and DML commands, including
CREATE TABLE,ALTER TABLE, andDROP INDEX, which could be influenced by malicious input. - Sanitization: There is no mention of sanitizing or validating user-provided strings before they are used to generate SQL output or guide the agent's reasoning.
Audit Metadata