postgres

SUSPICIOUS. The skill’s database access and credential use fit its stated Postgres purpose, and the flagged markdown command/secret findings are mostly benign documentation artifacts. The decisive issue is install/runtime trust: it requires a shipped platform-specific CLI binary from a third-party personal skill publisher without clear release verification or checksum/signature evidence, so the skill carries high supply-chain risk even without signs of confirmed malware or credential exfiltration.

The code is a PostgreSQL administration and inspection module, not apparent malware. It contains a deliberate unrestricted SQL execution capability and an EXPLAIN ANALYZE path that may execute caller-supplied statements. These are serious authorization and least-privilege concerns if exposed to untrusted callers, but no malicious supply-chain behavior is evident in the supplied fragment.