makedsl
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user requests for database modeling and data filtering (e.g., "建模", "建表") to generate structured DSL YAML and CEL (Common Expression Language) expressions. There is a potential risk where malicious user input could be injected into these generated structures if the agent does not perform adequate sanitization.
- Ingestion points: User-supplied requirements for application schemas, entity definitions, and data filtering criteria as described in
SKILL.mdandreferences/EntityDataFilterUsage.md. - Boundary markers: Absent. The instructions do not specify delimiters or "ignore embedded instructions" warnings for the generated DSL content.
- Capability inventory: The skill facilitates the generation of YAML files and API payloads intended for use with the
makeclitool and the Make platform's Data and Meta APIs; it does not directly execute scripts or commands itself. - Sanitization: Absent. There are no instructions for the agent to escape, validate, or filter user-provided strings before they are placed into the
filter.expressionor YAML property fields.
Audit Metadata