pythia-deploy

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a set of local CLI tools (pythia deploy, pythia lint, pythia approve) to perform its primary function of database script deployment and validation. These tools are used for state management and deployment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of user-provided SQL and DDL files.
  • Ingestion points: Reads arbitrary file contents provided as script sets for deployment.
  • Boundary markers: The workflow enforces a mandatory preview step and requires a manual approval token (10 hex) before any modifications are executed.
  • Capability inventory: The skill has the capability to modify database schemas and data via the pythia deploy command.
  • Sanitization: Uses pythia lint to validate scripts and excludes dangerous SQL*Plus directives and session-altering commands (e.g., HOST, CONNECT, ALTER SESSION) from the automated execution path.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 04:26 PM