database-schema-design
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze potentially untrusted application requirements and specification documents provided by the user.
- Ingestion points: Workflow step 1 in SKILL.md involves interviewing users or parsing specification documents to identify entities, attributes, and relationships.
- Boundary markers: The skill does not define explicit delimiters or instructions to isolate or treat external specifications as untrusted data.
- Capability inventory: The agent is instructed to generate complete SQL DDL scripts based on the ingested requirements.
- Sanitization: No input validation, filtering, or sanitization steps are specified for the provided requirements.
- [NO_CODE]: The skill consists entirely of instructional markdown and SQL examples. It contains no executable scripts, binaries, or external dependencies.
Audit Metadata