data-engineering-data-pipeline
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-provided input through the $ARGUMENTS variable to generate architectural designs and implementation code. This creates a potential surface for indirect prompt injection where malicious instructions embedded in the input could influence the agent's output.
- Ingestion points: The $ARGUMENTS placeholder in the Requirements section of SKILL.md.
- Boundary markers: The skill does not implement specific delimiters or 'ignore' instructions to separate user-provided requirements from the core logic.
- Capability inventory: The skill is designed to generate complex code for data ingestion (Python/SQL), orchestration (Airflow/Prefect), and transformation (dbt/Spark).
- Sanitization: There is no evidence of input validation or sanitization within the skill's instructions.
Audit Metadata