All 42 backtick detections are Markdown fences or inline code, not shell execution. Eight reconnaissance matches are schema identifiers, and multilingual diagrams explain the entropy alert. Destructive delete and overwrite examples still lack confirmation, backup, and environment safeguards.
The command reference shows an ALTER TABLE DELETE, and the PySpark template uses overwrite mode. Neither example requires confirmation, backup verification, or a dry run.
Both destructive operations appear directly in reusable examples, with no adjacent safety gate. The placeholder targets reduce immediate impact but not reuse risk.
All 51 static findings are false positives caused by Markdown formatting, SQL identifiers, multilingual text, and documentation examples. No prompt injection, hidden executable payload, or obfuscation was found. Operational examples can still delete or overwrite data without explicit confirmation safeguards.
The command reference includes a database delete, and the PySpark template uses overwrite mode. The skill does not require confirmation, backups, or dry runs before these actions.
Both destructive patterns are explicit examples, and surrounding guidance directs the agent to deploy and run pipelines. Risk depends on access to live systems.
The JDBC example places username and password values directly in pipeline code. Although placeholders, this pattern can encourage users to embed real credentials.
The username and password options are visibly embedded in the example. They are placeholders, so no actual secret exposure is present.
All 51 static findings are false positives caused by Markdown formatting, SQL identifiers, multilingual text, and documentation examples. No prompt injection, hidden executable payload, or obfuscation was found. Operational examples can still delete or overwrite data without explicit confirmation safeguards.
The command reference includes a database delete, and the PySpark template uses overwrite mode. The skill does not require confirmation, backups, or dry runs before these actions.
Both destructive patterns are explicit examples, and surrounding guidance directs the agent to deploy and run pipelines. Risk depends on access to live systems.
The JDBC example places username and password values directly in pipeline code. Although placeholders, this pattern can encourage users to embed real credentials.
The username and password options are visibly embedded in the example. They are placeholders, so no actual secret exposure is present.
All 51 static findings are false positives caused by Markdown formatting, SQL identifiers, multilingual text, and documentation examples. No prompt injection, hidden executable payload, or obfuscation was found. Operational examples can still delete or overwrite data without explicit confirmation safeguards.
The command reference includes a database delete, and the PySpark template uses overwrite mode. The skill does not require confirmation, backups, or dry runs before these actions.
Both destructive patterns are explicit examples, and surrounding guidance directs the agent to deploy and run pipelines. Risk depends on access to live systems.
The JDBC example places username and password values directly in pipeline code. Although placeholders, this pattern can encourage users to embed real credentials.
The username and password options are visibly embedded in the example. They are placeholders, so no actual secret exposure is present.