datatables
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
wmillCLI tool for managing migrations (e.g.,wmill datatable migrate up,wmill datatable migrate new). These are standard operations for the Windmill platform. - [EXTERNAL_DOWNLOADS]: The skill references official documentation at
https://www.windmill.dev/docs/core_concepts/persistent_storage/data_tables. This is a trusted resource belonging to the skill's authoring organization. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent translates user requests into SQL migrations. While this creates a potential surface for SQL injection if the agent does not properly validate user requirements, the skill includes defensive instructions such as using transactions (
BEGIN; ... END;) and role-based access controls to mitigate risks.
Audit Metadata