build-backend-database
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional and promotes security best practices in database management. It enforces data integrity via DDL constraints, requires rollback plans for all migrations, and establishes transaction boundaries to prevent resource leaks.
- [PROMPT_INJECTION]: No attempts to bypass safety filters, override system instructions, or use jailbreak-style role-playing were detected. The instructions are professional and task-oriented.
- [DATA_EXFILTRATION]: There are no network-capable commands (e.g., curl, wget) or references to sensitive local file paths like ~/.ssh or .env files. The skill operates solely on provided database requirements.
- [REMOTE_CODE_EXECUTION]: No external packages or remote scripts are downloaded or executed. The skill does not perform runtime code generation or dynamic evaluation of untrusted strings.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes user-defined database schemas, query requirements, and data repair plans.
- Boundary markers: It utilizes explicit 'Checkpoints' and a 'Validation Checklist' to ensure the agent verifies its own output against safety rules before finalization.
- Capability inventory: The skill's primary capability is generating SQL scripts and migration plans.
- Sanitization: It mandates 'dry-run' modes for data repairs and 'staging verification' for migrations, effectively mitigating the risk of executing harmful SQL derived from malicious user inputs.
Audit Metadata