database-optimizer
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The database-optimizer skill is a specialized tool for performance tuning and architectural optimization. A thorough review of the instructions and reference materials confirms that the skill performs legitimate analytical tasks without any signs of obfuscation, data exfiltration, or unauthorized persistence mechanisms.
- [EXTERNAL_DOWNLOADS]: The reference documentation includes links to official repositories for established observability tools. Specifically, it mentions the Jaeger Operator manifest on GitHub and the Prometheus Community Helm chart repository. These are well-known, trusted sources in the DevOps ecosystem.
- [COMMAND_EXECUTION]: The documentation provides standard CLI command examples for deploying observability infrastructure using tools like kubectl, helm, and docker-compose. These commands are illustrative and provided for setup purposes in the reference files.
- [PROMPT_INJECTION]: The skill processes untrusted input such as SQL queries, execution plans, and performance logs, creating a surface for indirect prompt injection. 1. Ingestion points: Database query strings, execution plans, and performance logs provided at runtime for optimization analysis. 2. Boundary markers: The skill specifies a clear output format using XML tags, which helps the agent distinguish generated responses from input data. 3. Capability inventory: The skill focuses on analysis and design; it does not request tool permissions for shell execution, file system modification, or network access in its frontmatter configuration. 4. Sanitization: There is no explicit instruction for the sanitization or validation of the input database artifacts before processing.
Audit Metadata