ms-access
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could contain malicious instructions.
- Ingestion points: The skill reads data from
.accdb,.mdb, and.csvfiles usingpyodbc(Python),mdbtools(Bash), andDoCmd.TransferText(VBA). - Boundary markers: No explicit boundary markers or "ignore instructions" wrappers are suggested for the ingested content.
- Capability inventory: The skill utilizes powerful capabilities including executing SQL via
CurrentDb.Execute, running VBA macros, and invoking shell commands throughmsaccess.exeandmdbtools. - Sanitization: The skill provides strong sanitization guidance, explicitly instructing the use of parameterized
DAO.QueryDefobjects and escaping apostrophes in dynamic filters to prevent SQL injection. - [COMMAND_EXECUTION]: The skill instructions involve executing external tools and binaries.
- Evidence: Provides examples for driving
msaccess.exewith command-line switches (/x,/compact,/cmd) and usingmdbtoolsutilities (mdb-tables,mdb-export,mdb-schema) for database management on Linux and macOS. - [PRIVILEGE_ESCALATION]: The skill contains instructions for installing software that requires elevated permissions.
- Evidence: Example 3 in
SKILL.mdsuggests usingsudo apt install mdbtoolsto set up the environment on Linux systems.
Audit Metadata