skills/legout/data-agent-skills/data-engineering-storage-remote-access-integrations-duckdb/Gen Agent Trust Hub
data-engineering-storage-remote-access-integrations-duckdb
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
httpfsanddeltaextensions from official DuckDB repositories to enable cloud storage access and Delta Lake integration. - [COMMAND_EXECUTION]: The code uses
con.sql()andcon.execute()to perform database operations, configuration, and data processing. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through data ingestion:
- Ingestion points: The methods
read_parquet,read_csv, anddelta_scaninSKILL.mdare used to ingest data from remote storage locations. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the examples provided.
- Capability inventory: The skill can execute SQL, create tables, and write data back to remote storage using
COPY TO. - Sanitization: No explicit sanitization or validation of the content of remote files is performed before processing.
Audit Metadata