database
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute administrative commands via the
zillizCLI, which is the official tool for the skill author's platform (zilliztech). - [DYNAMIC_EXECUTION]: The skill dynamically assembles shell commands by interpolating user-provided database names into predefined command templates.
- [INDIRECT_PROMPT_INJECTION]: The incorporation of untrusted user input into shell commands creates a potential vulnerability surface.
- Ingestion points: The
<database-name>and<database-name-to-drop>placeholders inSKILL.mdare designed to ingest data from user requests. - Boundary markers: No delimiters, tags, or specific instructions are provided to separate user input from the shell command structure.
- Capability inventory: The skill facilitates the execution of shell commands through the
zillizCLI to perform database operations. - Sanitization: There are no instructions for validating, escaping, or sanitizing user-provided strings before they are executed in the shell context.
Audit Metadata