database-performance
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests data from database query results and execution plans, creating a surface for indirect prompt injection where an attacker controlling database metadata could attempt to influence agent behavior.
- Ingestion points: Diagnostic SQL query results (e.g., from pg_stat_statements) and EXPLAIN ANALYZE output mentioned in SKILL.md.
- Boundary markers: No specific delimiters or instructions to ignore embedded content in query results are provided.
- Capability inventory: The skill allows the agent to execute SQL, modify database configuration parameters, and perform index management.
- Sanitization: No sanitization or validation of database-provided metadata is described before processing.
Audit Metadata