package-postgres-ha-green

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The green script downloads its core logic and dependencies from the vendor's GitHub repositories including github.com/getcolors/postgres-ha, github.com/getcolors/green, and github.com/getcolors/once.
  • [REMOTE_CODE_EXECUTION]: The skill uses Babashka's dependency management to pull and execute remote Clojure code at runtime. The main library dependency (postgres-ha) is pinned to a specific Git SHA (4be0bfb3706902fee07c71746aa7ba55244c6bec), which is a security best practice to ensure the integrity of the downloaded code.
  • [COMMAND_EXECUTION]: The tool executes administrative commands such as ssh, psql, patronictl, and pgbackrest to manage the database cluster. It also manages SSH configurations and keys within the user's ~/.ssh/ directory as part of its documented infrastructure provisioning functionality.
  • [DYNAMIC_EXECUTION]: The Babashka launcher script dynamically resolves and loads library namespaces at runtime using babashka.deps/add-deps and requiring-resolve based on the fetched dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 01:43 PM