postgres-test-setup

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [SAFE]: The skill's functionality is strictly aligned with its stated purpose of facilitating local database development and integration testing.
  • [COMMAND_EXECUTION]: The script start_postgres.py utilizes the docker Python library to manage container lifecycles, which is the intended behavior for this utility.
  • [COMMAND_EXECUTION]: The scripts execute SQL commands against a database. A safety assertion is implemented to ensure that the database host is localhost, preventing accidental execution against production or remote systems.
  • [EXTERNAL_DOWNLOADS]: The skill pulls the pgvector/pgvector:pg18-trixie image from Docker Hub, a standard well-known resource for PostgreSQL vector extensions in development environments.
  • [CREDENTIALS_UNSAFE]: The skill includes default credentials (e.g., 'testpwd') for the local test database instance. These are hardcoded as defaults for ephemeral development containers and are not intended for production secrets management.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 02:46 PM