dataset-rls-maintenance
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external JSON manifests to determine the scope of maintenance tasks.
- Ingestion points: The skill reads task definitions and target scopes from
maintenance-scope.jsonandredo-source-manifest.jsonas specified in the workflow section ofSKILL.md. - Boundary markers: The skill includes explicit
BoundariesandStop Conditionssections that prevent operations on data not visible under current-user RLS. - Capability inventory: The skill coordinates row-level deletion, retirement, and redo-import operations across multiple dataset tables using CLI commands.
- Sanitization: The workflow implements a mandatory human-in-the-loop approval process (
approval-record.json) and post-commit readback verification (readback-verify-report.json) to mitigate injection risks. - [COMMAND_EXECUTION]: The skill utilizes the
tiangong-lcaCLI for all database and authentication operations. - Evidence: Invokes command families such as
tiangong-lca dataset maintenanceandtiangong-lca auth. These commands are identified as vendor-specific resources provided by the skill author.
Audit Metadata