okf-mongodb
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions provide a command to install the connector binary directly from the author's GitHub repository using
go install github.com/xSAVIKx/okf-skills/skills/okf-mongodb@latest. - [COMMAND_EXECUTION]: The connector is implemented as a CLI tool that executes subcommands (
produce,ingest,schema) to sample database documents and write Markdown files to the local file system. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing data from external MongoDB collections to generate Markdown content.
- Ingestion points: Untrusted data is ingested in
main.gothrough thesampleCollectionfunction, which fetches raw documents from the database. - Boundary markers: The generated Markdown uses standard headers and tables but does not include explicit delimiters or instructions to ignore embedded content within the inferred fields.
- Capability inventory: The skill possesses network capabilities to connect to MongoDB and file-write capabilities via
okf.WriteConceptDocandos.MkdirAllinmain.go. - Sanitization: The implementation in
mongodb.gousesokf.SanitizeCellto escape field names and types when rendering the schema table, reducing the risk of Markdown structural manipulation.
Audit Metadata