postgresql

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes various shell commands for database lifecycle management, service control, and system administration (e.g., psql, systemctl, pg_basebackup). These commands are essential for its primary function of database administration.\n- [PRIVILEGE_ESCALATION]: The instructions frequently invoke sudo to perform tasks requiring elevated permissions, such as installing system packages (apt/dnf) and modifying configuration files in protected directories. This is appropriate for the system administration tasks described.\n- [EXTERNAL_DOWNLOADS]: The skill references external Docker images for deployment, including the official postgres:16-alpine image and the community-maintained edoburu/pgbouncer:latest image.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides mechanisms for processing external data which could potentially serve as an attack surface for indirect prompt injection.\n
  • Ingestion points: Loading SQL commands from external files via the \\i command and client-side copying via the \\copy command in SKILL.md.\n
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands in external data are present.\n
  • Capability inventory: The skill enables broad system control via shell execution in SKILL.md, including service management (systemctl) and directory modification (rm -rf).\n
  • Sanitization: No input validation or sanitization for the processed SQL files is implemented.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:46 AM