SQLAlchemy ORM Expert
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The automated scan flagged 'Ticket.status.in' as a malicious URL. Contextual analysis confirms this is a false positive. In SQLAlchemy ORM syntax, '.in_' (often occurring as '.in' in snippets or notes) is the standard operator for SQL IN clauses. Given the context of the 'Ticket' model status filtering, this is benign code syntax, not a remote connection attempt.- [DATA_EXFILTRATION] (SAFE): The skill involves database operations using standard drivers like 'asyncpg' and 'psycopg2'. These are used for legitimate data persistence and retrieval within the specified customer support application. No patterns of unauthorized data transmission to external domains were identified.- [INDIRECT_PROMPT_INJECTION] (LOW): The skill is designed to handle customer support tickets and user comments, which are untrusted data sources. This creates an attack surface for indirect prompt injection. However, the skill explicitly includes security best practices and utilizes Pydantic for data validation, providing basic sanitization measures.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata