hologres-query-optimizer

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill is primarily instructional, offering detailed reference material for database administrators to optimize SQL queries. All commands and GUC parameters described are standard administrative operations for the Hologres service.
  • [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing hologres-cli via pip. This tool is the official command-line interface for Alibaba Cloud Hologres, which is consistent with the skill's stated purpose and authored context ('aliyun').
  • [PROMPT_INJECTION]: The skill describes a workflow where an agent may process the output of EXPLAIN ANALYZE commands. While this introduces an indirect prompt injection surface (processing data from a database), the risk is inherent to the database optimization task and the skill does not automate dangerous actions based on untrusted data without human/agent oversight of the CLI commands.
  • Ingestion points: SQL execution plan output from EXPLAIN ANALYZE (SKILL.md).
  • Boundary markers: None explicitly defined in instructions.
  • Capability inventory: Execution of SQL and GUC configurations via hologres-cli (SKILL.md, references/guc-parameters.md).
  • Sanitization: Not specified, relies on the underlying CLI and database engine protections.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 11:38 AM
Security Audit — agent-trust-hub — hologres-query-optimizer