turingdb
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external files such as JSONL, GML, Parquet, and CSV, which creates a potential surface for indirect prompt injection if malicious instructions are embedded within the imported data.
- Ingestion points: Data ingestion occurs through
LOAD JSONL,LOAD GML, andLOAD CSVcommands as described inimporting.mdandquerying.md. - Boundary markers: The documentation does not specify the use of delimiters or instructions to ignore commands embedded in external data.
- Capability inventory: The skill possesses extensive capabilities, including shell command execution (
turingdbandturing-parquetCLIs), network communication (via HTTP backends and S3 transfers), and filesystem modification (database writes). - Sanitization: No explicit sanitization or validation steps are provided for the agent to apply to external data before it is processed.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to perform administrative shell operations.
startup.mddetails installing theturingdbpackage and using theturingdbCLI to start the database server with various flags (e.g.,-demon,-turing-dir).importing.mddescribes using theturing-parquetCLI tool to generate graph files from Parquet data.
Audit Metadata