write-script-bigquery
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to use the
wmillCLI for various operations, includingwmill script preview,wmill script run, andwmill generate-metadata. These commands allow the agent to manage local files and interact with the Windmill platform as part of a standard development workflow.\n- [DYNAMIC_EXECUTION]: The agent is instructed to usewmill script previewto execute scripts locally. This enables the agent to test BigQuery queries and script logic before deployment, which is a core function of the skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies that script schemas may contain aprompt_for_aifield. The agent is explicitly told to follow these instructions when choosing inputs, which represents an indirect injection vector from external metadata.\n - Ingestion points: The
prompt_for_aistring located in.script.yamlfiles.\n - Boundary markers: No specific delimiters or safety warnings for handling these embedded instructions are provided.\n
- Capability inventory: The agent can execute local code via
wmill, modify local filesystem metadata, and perform remote deployments viawmill sync push.\n - Sanitization: The skill does not specify any sanitization or validation protocols for the content of the
prompt_for_aifield.
Audit Metadata