signals-scout-data-warehouse
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill identifies external data sources as potential attack vectors and provides specific defensive instructions.
- Ingestion points: External server error messages (
latest_error) and user-configured source/schema names (SKILL.md). - Boundary markers: Explicitly instructs the agent to treat external text strictly as data and never as instructions, emphasizing that error messages do not authorize actions.
- Capability inventory: Uses
execute-sqlfor metadata lookups and report-writing tools likeemit_reportandedit_report(SKILL.md). - Sanitization: Directs the agent to truncate long messages and quote them as untrusted snippets.
- [COMMAND_EXECUTION]: The skill uses an SQL execution tool to query system metadata.
- Evidence: Performs automated scans against
system.source_schemasandsystem.data_modeling_viewsto monitor the integrity of armed data imports.
Audit Metadata