postgres
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the
psqlcommand-line tool. This includes running arbitrary SQL queries via the-cflag and executing SQL scripts from files using the-fflag. This is a primary and intended function of the skill. - [EXTERNAL_DOWNLOADS]: The skill metadata contains installation instructions for the
postgresql-clientusing system package managers including Homebrew (macOS), APT (Linux), and Scoop (Windows). These are well-known, trusted package management systems and are used to fulfill the skill's requirements. - [SAFE]: The skill uses industry-standard practices for database connection management, specifically recommending the use of environment variables (e.g.,
DATABASE_URL) to handle sensitive connection strings rather than hardcoding credentials. - [INDIRECT_PROMPT_INJECTION_SURFACE]:
- Ingestion points: The skill reads data from external PostgreSQL databases through query results returned to the
psqlCLI (SKILL.md). - Boundary markers: No explicit delimiters are used in the provided examples to wrap database output.
- Capability inventory: The skill can execute shell commands (
psql) and interact with file systems (psql -f). - Sanitization: No explicit sanitization of database content is performed within the instructions; the agent relies on its own processing logic for the returned data.
Audit Metadata