functions

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides a reference for querying databases, which involves processing potentially untrusted data from external sources like binary analysis results.\n
  • Ingestion points: SQL query results from database tables such as funcs, instructions, and imports (SKILL.md).\n
  • Boundary markers: The documentation does not specify the use of delimiters or warnings to ignore instructions embedded in data.\n
  • Capability inventory: The skill identifies Bash and Read as allowed tools (SKILL.md frontmatter).\n
  • Sanitization: There is no mention of sanitizing or escaping the data retrieved from the database before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 07:16 PM