infra-postgres

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the clickhousectl CLI tool directly from the vendor's official domain (clickhouse.com). This is a standard installation procedure for the vendor's tooling.
  • [REMOTE_CODE_EXECUTION]: A installation script is downloaded and executed via curl -fsSL https://clickhouse.com/cli | sh. This operation targets the official vendor infrastructure to install the necessary management utility.
  • [COMMAND_EXECUTION]: The skill makes extensive use of local shell commands to manage database infrastructure, including:
  • docker commands to manage local Postgres containers.
  • psql, pg_dump, and pg_restore for database interaction and migration.
  • The clickhousectl CLI for cloud service management.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process output from various external sources, creating a surface for indirect instructions.
  • Ingestion points: Instructions in SKILL.md, ref/local.md, ref/cloud.md, and ref/migrate.md involve reading and acting upon JSON output from clickhousectl, query results from psql, and logs from docker or pg_dump.
  • Boundary markers: The instructions do not define explicit boundary markers or "ignore instructions" warnings for the data ingested from these tools.
  • Capability inventory: The skill has significant capabilities, including executing shell commands, performing file system operations (writing to .env, ca.pem, and dump/ directories), and conducting network operations through the vendor's CLI.
  • Sanitization: There is no explicit sanitization or escaping of the external data before it is presented to or processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 07:46 PM