user-property-timezone
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill constructs dynamic SQL formulas and shell commands based on interactive user input.
- Ingestion points: User input captured via
AskUserQuestioninSKILL.mdregarding target field names, timezone fields, and fixed offset values. - Boundary markers: The instructions lack explicit delimiters or 'ignore' instructions to prevent the agent from executing user-injected SQL or command fragments contained within property names.
- Capability inventory: The skill utilizes the
ae-clitool to perform metadata discovery, run ad-hoc SQL queries for environment calibration, and create persistent virtual property assets. - Sanitization: There is no documented validation or escaping process for the strings retrieved from the user before they are placed into the
--sql-expressionand other parameters of theae-clicommands.
Audit Metadata