Skills
Navigate
skills/stahura/domo-ai-vibe-rules/sql-query/Gen Agent Trust Hub

sql-query

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill implements an AI-driven text-to-SQL workflow which creates an attack surface for indirect prompt injection.\n
  • Ingestion points: The question input used in the AIClient.text_to_sql method call in SKILL.md.\n
  • Boundary markers: Absent. There are no delimiters or specific instructions mentioned to protect the AI context from untrusted user input within the question.\n
  • Capability inventory: The skill provides full SQL execution capabilities via the SqlClient.get method as documented in SKILL.md.\n
  • Sanitization: Absent. AI-generated SQL is passed directly to the execution client without validation, filtering, or manual review.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 06:15 PM