database-performance-tuning

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a bundled shell script scripts/pg-diagnose.sh for database performance analysis.\n
  • Evidence: SKILL.md contains instructions for the agent to run the script with the database URL parameter.\n- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection as it ingests and processes SQL query strings and metadata from the database, which are external and untrusted inputs.\n
  • Ingestion points: Diagnostic results from scripts/pg-diagnose.sh and output from PostgreSQL EXPLAIN and pg_stat_statements views.\n
  • Boundary markers: Absent; there are no instructions to the agent to disregard potential prompt injection patterns in retrieved database records.\n
  • Capability inventory: The agent has shell script execution capabilities and can execute arbitrary SQL queries through database tools.\n
  • Sanitization: No data sanitization or filtering logic is implemented for the database outputs before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 04:11 AM
Security Audit — agent-trust-hub — database-performance-tuning