schema-e2e-validation
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several system commands including
docker,colima,doppler, andearthly. It also runs a local shell script./scripts/earthly-with-doppler.shto facilitate secret injection from Doppler into the Earthly build environment. - [EXTERNAL_DOWNLOADS]: The instructions include installing the
earthlytool using Homebrew (brew install earthly). This is a standard practice for setting up the required environment for the skill. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes external YAML schema files to generate Python code, SQL DDL, and documentation.
- Ingestion points: Processes schema files such as
~/eon/gapless-network-data/schema/clickhouse/ethereum_mainnet.yaml. - Boundary markers: No specific boundary markers or 'ignore' instructions are provided for the input data.
- Capability inventory: Uses the
Bashtool to executeearthly, which performs code generation based on the input schemas. - Sanitization: No evidence of sanitization or validation of the input schema content before processing is provided.
Audit Metadata