database-engineering

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No evidence of prompt injection or instruction override patterns detected. The skill focuses on engineering workflows and architectural consistency.
  • [DATA_EXFILTRATION]: No network operations, sensitive file path access, or credential harvesting patterns were found. The skill does not request or use any tools that interact with the network or file system.
  • [OBFUSCATION]: No obfuscated content, Base64 strings, zero-width characters, or homoglyph attacks were detected in any of the analyzed files.
  • [REMOTE_CODE_EXECUTION]: The skill does not perform any remote code downloads or execution. It explicitly states it has no runtime dependencies.
  • [DYNAMIC_EXECUTION]: No dynamic execution patterns such as eval(), exec(), or runtime compilation were identified.
  • [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process existing database schemas and code (ingestion surface), it lacks the capabilities (no tools or write operations) to be exploited via indirect injection. The instructions emphasize security-engineering for handling untrusted input.
  • [METADATA_POISONING]: Metadata fields are legitimate and consistent with the skill's purpose. The licensing (MIT) and suite information appear standard.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 12:56 PM