data-replication-setup
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The documentation in
references/master-slave-primary-standby-setup.mdincludes commands usingsudo systemctlfor database service management. These instructions guide the agent or user to perform operations with administrative privileges which are standard for database administration but pose a security risk if executed without oversight. - [INDIRECT_PROMPT_INJECTION]: The script
scripts/validate-schema.shprocesses an external filename argument without sanitization or input validation markers. - Ingestion points: Positional argument
$1(represented as a template placeholder) inscripts/validate-schema.sh. - Boundary markers: None identified in the script or instructions to separate user input from command execution.
- Capability inventory: The skill includes capabilities for service management (
systemctl), database backup (pg_basebackup), and shell script execution. - Sanitization: No sanitization or verification of the provided schema filename is performed before usage.
Audit Metadata