diff --git a/schema/osquery_fleet_schema.json b/schema/osquery_fleet_schema.json
index b611ba9d926..5e6b1c7ed60 100644
--- a/schema/osquery_fleet_schema.json
+++ b/schema/osquery_fleet_schema.json
@@ -314,7 +314,7 @@
       },
       {
         "name": "risk_flags",
-        "description": "Comma-separated security risk tokens (empty string = none). Possible values:`remote_fetch_exec`, `unpinned_dependency`, `mcp_shell_exec`, `mcp_fs_write`, `plaintext_secret`, `bypass_permissions`, `injection_markers`, `hidden_unicode`.",
+        "description": "Comma-separated security risk tokens (empty string = none). Possible values: `remote_fetch_exec`, `unpinned_dependency`, `mcp_shell_exec`, `mcp_fs_write`, `plaintext_secret`, `bypass_permissions`, `injection_markers`, `hidden_unicode`.",
         "type": "text",
         "required": false
       },
diff --git a/schema/tables/ai_tools.yml b/schema/tables/ai_tools.yml
index e0c92710a74..bb596736c11 100644
--- a/schema/tables/ai_tools.yml
+++ b/schema/tables/ai_tools.yml
@@ -87,7 +87,7 @@ columns:
     type: integer
     required: false
   - name: risk_flags
-    description: "Comma-separated security risk tokens (empty string = none). Possible values:`remote_fetch_exec`, `unpinned_dependency`, `mcp_shell_exec`, `mcp_fs_write`, `plaintext_secret`, `bypass_permissions`, `injection_markers`, `hidden_unicode`."
+    description: "Comma-separated security risk tokens (empty string = none). Possible values: `remote_fetch_exec`, `unpinned_dependency`, `mcp_shell_exec`, `mcp_fs_write`, `plaintext_secret`, `bypass_permissions`, `injection_markers`, `hidden_unicode`."
     type: text
     required: false
   - name: sha256