database-design
Pass
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: LOW
Full Analysis
- [Indirect Prompt Injection] (SAFE): The skill includes a script that processes external schema files, which is a standard surface for static analysis tools. \n
- Ingestion points:
scripts/schema_validator.pyreads content from local project files (Prisma and Drizzle schemas). \n - Boundary markers: None (typical for local linting tools). \n
- Capability inventory: The script is limited to read-only operations. It does not use
subprocess,os.system, or network libraries (likerequests), and it does not write to the file system. \n - Sanitization: The script uses regular expressions to extract structural information for reporting purposes without executing the content.
Audit Metadata