skills/gemini-cli-extensions/cloud-sql-postgresql/cloud-sql-postgres-vectorassist/Gen Agent Trust Hub
cloud-sql-postgres-vectorassist
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @toolbox-sdk/server package from the official npm registry. This is an expected mechanism for executing its core functionality.
- [CREDENTIALS_UNSAFE]: The scripts are configured to read database connection details, including passwords, from environment variables and local .env files to authenticate with the database instance. These credentials remain local to the execution environment.
- [COMMAND_EXECUTION]: The skill executes shell commands via npx to perform its tasks. It includes basic argument escaping for compatibility and security on Windows systems, and its primary purpose is the execution of intended administrative SQL commands.
Audit Metadata