database-seeding
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill workflow involves generating and then executing scripts in various languages (Python, SQL, JavaScript) to populate databases.
- Evidence: Step 3 (Generate seed scripts) and Step 6 (Execute and verify) in SKILL.md outline a process where code is created and immediately run by the agent. Example 1 provides the template for such a script.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted external data (database schemas and migration files) to drive its code generation logic.
- Ingestion points: Database schema inspection and migration file analysis (SKILL.md, Step 1).
- Boundary markers: Absent; there are no instructions to the agent to treat schema metadata (like comments or column names) as untrusted or to ignore instructions embedded within them.
- Capability inventory: The skill generates and executes complex logic including database operations and data generation scripts.
- Sanitization: Absent; no sanitization or validation of input schema components is mentioned before they are used to generate code.
Audit Metadata