Skills
skills/gemini-cli-extensions/alloydb/alloydb-postgres-optimize/Gen Agent Trust Hub

alloydb-postgres-optimize

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: All scripts in the skill use npx to download and execute the @toolbox-sdk/server@1.1.0 package from the NPM registry at runtime.
  • [COMMAND_EXECUTION]: The skill executes system commands using child_process.spawn to trigger the toolbox server with user-provided arguments. On Windows, it uses shell: true to run npx.cmd.
  • [DATA_EXFILTRATION]: The scripts are designed to read database credentials and configuration from a .env file located in a parent directory (../../../.env). This is a standard and expected mechanism for local credential management for this type of administrative tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 10:24 PM