mariadb-impl-galera-cluster
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs standard administrative tools such as
systemctl,apt, anddnfto install the Galera arbitrator and manage MariaDB services. These actions are consistent with the skill's primary purpose of database cluster management. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from database status commands to guide critical cluster operations like bootstrapping and state transfer selection.
- Ingestion points: The skill executes
mariadb -e "SHOW STATUS..."calls acrossSKILL.mdandreferences/examples.mdto retrieve cluster metadata. - Boundary markers: No explicit delimiters are used to wrap the output of database queries before agent processing, relying on natural language interpretation.
- Capability inventory: The skill utilizes service management (
systemctl), package installation (apt), and specialized cluster commands (galera_new_cluster). - Sanitization: Database status output is processed without explicit sanitization or validation steps before being used to drive recovery logic.
Audit Metadata