postgresql
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes various shell commands for database lifecycle management, service control, and system administration (e.g.,
psql,systemctl,pg_basebackup). These commands are essential for its primary function of database administration.\n- [PRIVILEGE_ESCALATION]: The instructions frequently invokesudoto perform tasks requiring elevated permissions, such as installing system packages (apt/dnf) and modifying configuration files in protected directories. This is appropriate for the system administration tasks described.\n- [EXTERNAL_DOWNLOADS]: The skill references external Docker images for deployment, including the officialpostgres:16-alpineimage and the community-maintainededoburu/pgbouncer:latestimage.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides mechanisms for processing external data which could potentially serve as an attack surface for indirect prompt injection.\n - Ingestion points: Loading SQL commands from external files via the
\\icommand and client-side copying via the\\copycommand inSKILL.md.\n - Boundary markers: No specific delimiters or instructions to ignore embedded commands in external data are present.\n
- Capability inventory: The skill enables broad system control via shell execution in
SKILL.md, including service management (systemctl) and directory modification (rm -rf).\n - Sanitization: No input validation or sanitization for the processed SQL files is implemented.
Audit Metadata