sql-performance-optimizer

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured guidance for optimizing SQL queries, particularly for Trino SQL. It emphasizes maintaining result consistency and numeric precision, which are best practices for database tuning.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data in the form of user-provided SQL statements and execution plans.
  • Ingestion points: SQL statements and execution plans provided via user input (SKILL.md).
  • Boundary markers: None explicitly defined to separate user SQL from system instructions.
  • Capability inventory: No tool permissions (e.g., shell access, network, or file writes) are requested in the skill's configuration, significantly limiting the impact of any potential injection.
  • Sanitization: The skill instructions do not specify sanitization for the inputs, but since the agent's response is limited to text-based optimization suggestions, the risk remains minimal.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 10:17 AM
Security Audit — agent-trust-hub — sql-performance-optimizer