authoring-data-quality-checks
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external warehouse tables and views via
system.information_schemaandposthog:execute-sql. This creates a surface where data processed by the agent could contain instructions, though this is inherent to the skill's purpose as a data validation tool. - Ingestion points: Data is pulled from
system.information_schema.data_quality_checks,system.information_schema.columns, and the output ofposthog:execute-sqlinSKILL.md. - Boundary markers: The instructions do not define explicit boundary markers or delimiters for untrusted data content.
- Capability inventory: The skill utilizes
posthog:execute-sqlfor reading/querying andposthog:data-quality-check-create-*for writing check configurations. - Sanitization: No specific sanitization or escaping logic is described for the content retrieved from warehouse tables.
- [DYNAMIC_EXECUTION]: The skill enables the generation and execution of dynamic HogQL queries through the
custom_sqlcheck type and the manual execution of compiled queries viaposthog:execute-sql. This is the primary intended function of the skill for performing arbitrary data assertions.
Audit Metadata