ae-dataops

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential surface for indirect prompt injection as it retrieves and processes data from external sources. * Ingestion points: The skill ingests data from external databases and metadata services via dataops_ide (SQL queries), dataops_integration (datasource browsing), and dataops_datatable (catalog search) commands across multiple files. * Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between its instructions and potentially malicious content embedded in the data retrieved from external systems. * Capability inventory: The skill utilizes ae-cli, which has the ability to write files to the local system, execute SQL, manage workflow orchestration, and delete resources such as tasks and backfill jobs. * Sanitization: The instructions do not define any sanitization, filtering, or validation processes for handling external data before it is incorporated into the agent context.
  • [COMMAND_EXECUTION]: The skill operates primarily by executing subcommands of the ae-cli binary, which manages the lifecycle of data objects and operations.
  • [EXTERNAL_DOWNLOADS]: The skill includes functionality to download data from the platform to the local environment through the +get_sql_query_status command using the --downloadTo flag.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 02:32 PM