query-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing untrusted external data, which inherently creates an indirect prompt injection surface.
- Ingestion points: The skill ingests slow SQL queries, database execution plans (EXPLAIN output), and application code snippets as described in the Workflow and Usage sections of SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to treat the database-related input as untrusted content.
- Capability inventory: The skill is capable of generating administrative SQL commands (e.g., CREATE INDEX) and recommending code changes in various ORM frameworks.
- Sanitization: No explicit input validation or sanitization steps are defined for the data processed by the agent.
Audit Metadata