data-engineering-storage-remote-access-integrations-duckdb

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the httpfs and delta extensions from official DuckDB repositories to enable cloud storage access and Delta Lake integration.
  • [COMMAND_EXECUTION]: The code uses con.sql() and con.execute() to perform database operations, configuration, and data processing.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface through data ingestion:
  • Ingestion points: The methods read_parquet, read_csv, and delta_scan in SKILL.md are used to ingest data from remote storage locations.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the examples provided.
  • Capability inventory: The skill can execute SQL, create tables, and write data back to remote storage using COPY TO.
  • Sanitization: No explicit sanitization or validation of the content of remote files is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 03:19 PM