mongodb-query-optimizer
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external database sources and performance logs to provide optimization advice, creating a surface for potential instruction injection.
- Ingestion points: Data is retrieved via the
find,explain, andatlas-get-performance-advisorMCP tools as specified inSKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands within the retrieved data were identified.
- Capability inventory: The skill uses MCP tools to read collection data, explain queries, and access Atlas Performance Advisor logs.
- Sanitization: The instructions do not define sanitization or validation logic for the data retrieved from the database.
Audit Metadata