sql-development
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary focus is on establishing professional SQL coding standards and DBA practices. It includes extensive documentation on performance tuning and schema design without introducing any malicious code or commands.\n- [INDIRECT_PROMPT_INJECTION]: Vulnerability surface identified. 1. Ingestion points: Data entering through stored procedure parameters and view processing in SKILL.md and examples/schema-design-example.md. 2. Boundary markers: Absent. 3. Capability inventory: SQL script generation and execution via sp_executesql and DDL operations. 4. Sanitization: High compliance with parameterization and identifier escaping best practices.\n- [DYNAMIC_EXECUTION]: Stored procedure templates in scripts/stored-proc-template.sql and references/tsql-patterns.md utilize sp_executesql for dynamic filtering and sorting. These patterns are implemented securely using parameterization and identifier quoting (e.g., QUOTENAME), adhering to standard security practices for dynamic SQL generation.
Audit Metadata