sql-translation
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Rscript -eto execute R code for package loading, snapshot testing, and documentation generation. - [COMMAND_EXECUTION]: The skill calls the
aircommand to format source code files within the repository. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface during the research phase.
- Ingestion points: Research notes compiled from external SQL documentation and stored in
research/markdown files. - Boundary markers: Absent; no specific delimiters are used to wrap external content or warn the agent.
- Capability inventory: The agent is tasked with writing code to backend R files (e.g.,
R/backend-sqlite.R) and executing code via subprocess calls (Rscript). - Sanitization: No explicit verification or sanitization of the researched documentation is performed before implementation.
Audit Metadata