surrealdb-docs
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
sshto execute commands on the remote hostsurrealdb.sh. This is the intended functionality for retrieving documentation in a terminal-based format. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from an external documentation source, which creates a potential surface for indirect prompt injection if the documentation were to contain adversarial instructions.
- Ingestion points: Output from
sshcommands such ascat,grep, andheaddescribed inSKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard embedded prompts within the retrieved documentation.
- Capability inventory: The skill has the capability to execute shell commands via
sshand use local text-processing utilities. - Sanitization: No sanitization or filtering is performed on the documentation content before it is presented to the agent.
Audit Metadata