postgres-pro
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard administrative commands for managing PostgreSQL services (e.g.,
systemctl stop postgresql), handling binary tools likepg_basebackupandpg_ctl, and performing necessary file system maintenance like clearing data directories during replication setup. These are legitimate operations for a database administrator role. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze dynamic database outputs such as
EXPLAINplans andpg_statmonitoring views. While this constitutes an attack surface where maliciously crafted database content could influence agent analysis, it is an essential part of the skill's optimization workflow. * Ingestion points:references/maintenance.md,references/performance.md(via system views and explain output). * Boundary markers: Absent. * Capability inventory: SQL query execution, configuration modification, and system service management. * Sanitization: Absent. - [EXTERNAL_DOWNLOADS]: The skill references the installation of database management tools (e.g.,
pg-auto-failover) using standard system package managers likeapt-get, which target trusted official repositories.
Audit Metadata