pgbouncer-architect
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided data (such as application names, ORM choices, and workload parameters) and interpolates them into generated configuration files and reports. While this creates a vulnerability surface where a malicious user could attempt to inject instructions into the generated output, the risk is inherent to the skill's primary function as a configuration generator.
- Ingestion points: User inputs collected in Phase 1 ('Discovery') of
SKILL.md(e.g., application framework, ORM, number of workers). - Boundary markers: Absent in the generated configuration templates.
- Capability inventory: Generates text-based configuration files (
pgbouncer.ini,docker-compose.yml,userlist.txt) and a markdown report. It does not execute code or perform network operations based on this data. - Sanitization: The instructions do not specify sanitization or escaping of the user-provided strings before interpolation.
Audit Metadata