risingwave
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official RisingWave MCP server source code from the vendor's GitHub repository (github.com/risingwavelabs/risingwave-mcp).
- [COMMAND_EXECUTION]: Provides instructions to clone a repository and install Python dependencies to set up the MCP server.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external Kafka and database CDC sources.
- Ingestion points: Data ingestion is defined via 'CREATE SOURCE' and 'CREATE TABLE' statements for Kafka and PostgreSQL/MySQL CDC sources in 'SKILL.md'.
- Boundary markers: No explicit boundary markers or instructions are provided to distinguish between data content and control instructions.
- Capability inventory: The MCP server allows for query execution, schema exploration, and DDL operations.
- Sanitization: No sanitization or validation logic for external data stream content is mentioned.
Audit Metadata