pgbouncer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The provided configuration examples for
docker-compose.ymland the FastAPI backend include a hardcoded password string in the connection URL. - Evidence:
DATABASE_URL: postgres://verifid_app:password@postgres:5432/verifid_kycinSKILL.md. - Evidence:
DATABASE_URL = "postgresql://verifid_app:password@pgbouncer:6432/verifid_kyc"inSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill configures the service using the
edoburu/pgbouncerDocker image, which is a standard community-maintained container for this utility. - Evidence:
image: edoburu/pgbouncer:latestinSKILL.md.
Audit Metadata