postgres-pro

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides standard administrative commands for managing PostgreSQL services (e.g., systemctl stop postgresql), handling binary tools like pg_basebackup and pg_ctl, and performing necessary file system maintenance like clearing data directories during replication setup. These are legitimate operations for a database administrator role.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze dynamic database outputs such as EXPLAIN plans and pg_stat monitoring views. While this constitutes an attack surface where maliciously crafted database content could influence agent analysis, it is an essential part of the skill's optimization workflow. * Ingestion points: references/maintenance.md, references/performance.md (via system views and explain output). * Boundary markers: Absent. * Capability inventory: SQL query execution, configuration modification, and system service management. * Sanitization: Absent.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of database management tools (e.g., pg-auto-failover) using standard system package managers like apt-get, which target trusted official repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 09:45 AM