pythia-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a set of local CLI tools (
pythia deploy,pythia lint,pythia approve) to perform its primary function of database script deployment and validation. These tools are used for state management and deployment. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of user-provided SQL and DDL files.
- Ingestion points: Reads arbitrary file contents provided as script sets for deployment.
- Boundary markers: The workflow enforces a mandatory preview step and requires a manual approval token (
10 hex) before any modifications are executed. - Capability inventory: The skill has the capability to modify database schemas and data via the
pythia deploycommand. - Sanitization: Uses
pythia lintto validate scripts and excludes dangerous SQL*Plus directives and session-altering commands (e.g.,HOST,CONNECT,ALTER SESSION) from the automated execution path.
Audit Metadata