dr-drill-runner
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as replication lag metrics, alert statuses, and smoke test results to generate drill reports and make automated go/no-go decisions.
- Ingestion points: Monitoring data and verification artifacts (SKILL.md Stage 3, Stage 5; references/restore-time.md Step 7).
- Boundary markers: The skill does not define specific delimiters or instructions to treat external monitoring data as untrusted.
- Capability inventory: The agent is instructed to use system commands including
psql,awsCLI,pg_dump, andpg_ctl. - Sanitization: There is no evidence of sanitization or strict schema validation for the external metrics or status reports ingested.
- [COMMAND_EXECUTION]: The skill instructions and reference files contain multiple examples of shell command execution for database management and cloud resource interaction.
- Evidence: Extensive use of
psql,pg_dump,aws s3,gpg, andpg_restorewithin SKILL.md and reference files to manage backups and restoration. - [DYNAMIC_EXECUTION]: Technical references include Python code snippets that construct and execute shell commands at runtime using external parameters.
- Evidence:
references/restore-time.mdusessubprocess.runto execute formatted strings for database restoration tasks (e.g.,gunzip -c {backup} | psql).
Audit Metadata