When the Query Bites Back

A text-to-SQL agent runs the model's output straight at the database

Technique first revealed 03 Aug 2023

🗺️ Tool-Using Agent Unsafe Tool / Code Execution Tool Misuse Excessive Agency

Tool-Using Agent

InstructionsDataActionsControl / decisionFeedback / logs

👆 Click a component to inspect

SetupStep 1 / 6

A self-service analytics agent

The company's BI team builds an assistant so anyone can ask questions like 'how many orders did we ship last week?' without knowing how databases work. You type a question; the assistant turns it into a database query, runs it, and shows you the answer.

⚙️How the agent is wiredconfig

tool: run_sql
  input:  sql_string (from model output)
  execute: db.query(sql_string)        # concatenated, executed verbatim
  credential: ANALYTICS_SVC            # role grants SELECT/INSERT/UPDATE/DELETE
  scope: ALL TENANTS (shared warehouse) # no row-level security
  guards: none (no allowlist, no parameterisation, no statement-type check)

← / → keys