perfetto-sql
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
trace_processorwrapper script from the official Perfetto project URL (https://get.perfetto.dev/trace_processor). - [COMMAND_EXECUTION]: Executes the downloaded Python wrapper script directly via
./trace_processorand useschmod +xto set execution permissions. - [INDIRECT_PROMPT_INJECTION]: The skill is instructed to accept and execute user-provided SQL queries without modification. This creates a surface where a malicious user could provide a query designed to exploit the environment.
- Ingestion points: User natural language requests and direct SQL input.
- Boundary markers: None specified for the input interpolation.
- Capability inventory: Execution of shell commands via
trace_processorand local file writes to /tmp/. - Sanitization: Explicitly avoids modification of user-provided SQL in the 'Precedence Rule'.
Audit Metadata