how-to-export-sqlite-tables-to-create-statements
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates querying database schema metadata (table and index names) and interpolating them into SQL statements. This represents a vulnerability surface if the skill is executed against a database containing maliciously crafted schema identifiers.
- Ingestion points: Database queries to sqlite_master defined in code snippets.
- Boundary markers: Absent; no instructions are provided to sanitize or validate schema names before interpolation.
- Capability inventory: SQLite database read access via the sqlite3 package.
- Sanitization: Absent; identifiers are interpolated directly into PRAGMA statements.
Audit Metadata