postgres-impl-query-performance-toolkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow queries pg_stat_activity (including the query text) and pg_stat_statements (including normalized query text), which are populated from other clients’/sessions’ SQL text—i.e., outsider-authored free text—then feeds that text into the agent’s LLM context for diagnosis.