write-script-mysql
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
wmillCLI for script execution (script preview,script run) and metadata management. These are standard operations for the Windmill development environment and the instructions explicitly prioritize user intent and iterative testing over silent deployment. - [SAFE]: SQL queries are constructed using prepared statement syntax with
?placeholders for parameters. This is a security best practice that prevents SQL injection vulnerabilities when handling user-provided data. - [SAFE]: The skill handles external data ingestion from S3 objects using structured MySQL functions (
JSON_TABLE), providing a controlled way to process remote data within the database engine. - [SAFE]: Deployment actions (mutating remote state) are restricted to scenarios where the user explicitly requests to publish or push changes, reducing the risk of accidental production overrides.
Audit Metadata