database-performance-tuning
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled shell script
scripts/pg-diagnose.shfor database performance analysis.\n - Evidence:
SKILL.mdcontains instructions for the agent to run the script with the database URL parameter.\n- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection as it ingests and processes SQL query strings and metadata from the database, which are external and untrusted inputs.\n - Ingestion points: Diagnostic results from
scripts/pg-diagnose.shand output from PostgreSQLEXPLAINandpg_stat_statementsviews.\n - Boundary markers: Absent; there are no instructions to the agent to disregard potential prompt injection patterns in retrieved database records.\n
- Capability inventory: The agent has shell script execution capabilities and can execute arbitrary SQL queries through database tools.\n
- Sanitization: No data sanitization or filtering logic is implemented for the database outputs before they are processed by the agent.
Audit Metadata