skills/legout/data-platform-agent-skills/data-engineering-storage-remote-access-integrations-duckdb/Gen Agent Trust Hub
data-engineering-storage-remote-access-integrations-duckdb
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (HIGH): The skill demonstrates processing data from untrusted external sources (S3, GCS, Azure) using
read_parquet,read_csv, anddelta_scan(SKILL.md). It possesses high-privilege capabilities including the ability to write data back to cloud storage via theCOPYcommand and execute complex SQL logic. No sanitization, validation, or boundary markers are provided for the ingested data, making it vulnerable to malicious instructions embedded in remote files. - Credentials Unsafe (HIGH): The documentation includes multiple examples of hardcoding AWS access keys (
AKIA...) and secret keys directly in the source code viaSETcommands andos.environassignments (SKILL.md). - External Downloads (MEDIUM): The skill uses
INSTALL httpfs;andINSTALL delta;to download and load binary extensions from the DuckDB repository at runtime. While the source is generally trusted, this constitutes the execution of unverified remote binaries (SKILL.md).
Recommendations
- AI detected serious security threats
Audit Metadata