package-postgres-ha-green
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
greenscript downloads its core logic and dependencies from the vendor's GitHub repositories includinggithub.com/getcolors/postgres-ha,github.com/getcolors/green, andgithub.com/getcolors/once. - [REMOTE_CODE_EXECUTION]: The skill uses Babashka's dependency management to pull and execute remote Clojure code at runtime. The main library dependency (
postgres-ha) is pinned to a specific Git SHA (4be0bfb3706902fee07c71746aa7ba55244c6bec), which is a security best practice to ensure the integrity of the downloaded code. - [COMMAND_EXECUTION]: The tool executes administrative commands such as
ssh,psql,patronictl, andpgbackrestto manage the database cluster. It also manages SSH configurations and keys within the user's~/.ssh/directory as part of its documented infrastructure provisioning functionality. - [DYNAMIC_EXECUTION]: The Babashka launcher script dynamically resolves and loads library namespaces at runtime using
babashka.deps/add-depsandrequiring-resolvebased on the fetched dependencies.
Audit Metadata