database-security
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with and ingest data from external databases, creating a surface where malicious database content could influence agent behavior.\n
- Ingestion points: Database query results and outputs from vulnerability scanning tools (SKILL.md).\n
- Boundary markers: Includes a mandatory confirmation gate requiring explicit user approval for probes, exploitation, or credential access (SKILL.md).\n
- Capability inventory: Utilizes database CLIs, sqlmap, and nuclei to perform active assessments (SKILL.md).\n
- Sanitization: No specific data sanitization or validation steps are defined for processing database output strings.\n- [COMMAND_EXECUTION]: The skill instructs the agent to use external tools such as sqlmap, nuclei, and official database command-line interfaces, which involves executing shell commands in the host environment.
Audit Metadata