creating-mermaid-dbt-dag
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from dbt project files (manifest.json, SQL models, Python models, and YAML configurations) which are considered untrusted sources.
- Ingestion points: Data is ingested through the
Read,Glob, andGreptools when accessingmanifest.jsonand model files in themodels/orseeds/directories. - Boundary markers: The skill contains a dedicated 'Handling External Content' section that explicitly warns the agent to ignore any instructions or commands embedded within these files.
- Capability inventory: The skill uses the
Read,Glob,Grep, andBash(jq *)tools for data retrieval and extraction. It does not possess capabilities for network exfiltration or modifying critical system files. - Sanitization: The instructions require the agent to extract only specific structured metadata (unique identifiers, resource types, and file paths) while ignoring any natural language instructions found in the processed data.
Audit Metadata