extension-querying-oql
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
icpCLI tool to interact with the project's backend canister. Examples includeicp canister call backend schema '()' --queryandicp canister call backend execute '("<json-query>")' --query.- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and process data returned from a remote canister, which represents a surface for indirect prompt injection if the retrieved content contains malicious instructions. - Ingestion points: Data returned from
icp canister call backend schemaandexecutemethods as documented inSKILL.md. - Boundary markers: Absent; there are no instructions to use delimiters or ignore instructions embedded within the canister's output.
- Capability inventory: The agent can execute shell commands via the
icpCLI and perform autonomous query construction based on the schema. - Sanitization: Absent; the instructions do not specify any validation or sanitization of the data retrieved from the canister before it is processed by the agent.
Audit Metadata