data-replication-setup

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The documentation in references/master-slave-primary-standby-setup.md includes commands using sudo systemctl for database service management. These instructions guide the agent or user to perform operations with administrative privileges which are standard for database administration but pose a security risk if executed without oversight.
  • [INDIRECT_PROMPT_INJECTION]: The script scripts/validate-schema.sh processes an external filename argument without sanitization or input validation markers.
  • Ingestion points: Positional argument $1 (represented as a template placeholder) in scripts/validate-schema.sh.
  • Boundary markers: None identified in the script or instructions to separate user input from command execution.
  • Capability inventory: The skill includes capabilities for service management (systemctl), database backup (pg_basebackup), and shell script execution.
  • Sanitization: No sanitization or verification of the provided schema filename is performed before usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:44 AM
Security Audit — agent-trust-hub — data-replication-setup