aiox-data-engineer
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute local CLI tools and scripts as part of its database management workflow. For instance, the activation instructions include a fallback mechanism to execute a local Node.js script:
node .aiox-core/development/scripts/unified-activation-pipeline.js data-engineer. It also utilizes standard utilities such asgit,psql,pg_dump, andsupabase-clito perform project status checks and database operations. - [DYNAMIC_EXECUTION]: The agent dynamically constructs shell commands based on the environment and user input. The
coderabbitintegration determines its execution path based on the host operating system, specifically handling paths for macOS/Linux (~/.local/bin/coderabbit) and Windows (wsl bash). Furthermore, therun-sqlcommand permits the execution of arbitrary SQL strings provided by the user or from local files. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a vulnerability surface for indirect prompt injection through the processing of local project files.
- Ingestion points: The agent ingests data from project stories in
docs/stories/, handoff artifacts in.aiox/handoffs/, and user-specified SQL files via theapply-migrationandrun-sqlcommands. - Boundary markers: There are no explicit markers or 'ignore' instructions defined for the content read from handoff artifacts or story files.
- Capability inventory: The agent has the ability to execute shell commands, run Node.js scripts, and perform database operations (DDL/DML) via SQL tools.
- Sanitization: The skill contains explicit instructions to redact sensitive credentials automatically and to validate user input before constructing dynamic SQL queries.
Audit Metadata