schema-e2e-validation

Pass

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several system commands including docker, colima, doppler, and earthly. It also runs a local shell script ./scripts/earthly-with-doppler.sh to facilitate secret injection from Doppler into the Earthly build environment.
  • [EXTERNAL_DOWNLOADS]: The instructions include installing the earthly tool using Homebrew (brew install earthly). This is a standard practice for setting up the required environment for the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes external YAML schema files to generate Python code, SQL DDL, and documentation.
  • Ingestion points: Processes schema files such as ~/eon/gapless-network-data/schema/clickhouse/ethereum_mainnet.yaml.
  • Boundary markers: No specific boundary markers or 'ignore' instructions are provided for the input data.
  • Capability inventory: Uses the Bash tool to execute earthly, which performs code generation based on the input schemas.
  • Sanitization: No evidence of sanitization or validation of the input schema content before processing is provided.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 4, 2026, 09:51 AM