postgres-operations-debugging
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data from database outputs, including execution plans, server logs, and activity statistics.
- Ingestion points: Untrusted data enters the agent's context through query results from views like
pg_stat_activityandpg_stat_statementsas referenced inreferences/05-monitoring.md. - Boundary markers: The instructions do not explicitly define delimiters for database output, which is common in technical documentation but technically increases the surface for indirect injection if a database contains malicious strings.
- Capability inventory: The skill enables the agent to perform complex SQL operations including
EXPLAIN ANALYZE,ALTER TABLE, and configuration changes. - Sanitization: There are no explicit sanitization routines defined for processing database results.
- [COMMAND_EXECUTION]: The reference files contain a variety of SQL commands intended for database maintenance and performance tuning.
- Evidence: Files such as
references/01-overview.mdandreferences/04-patroni-i-automatyczny-failover.mdprovide scripts for managing indices, gathering statistics, and monitoring replication. - Context: These operations are restricted to the database environment and are standard for the declared role of a PostgreSQL DBA debugging tool.
Audit Metadata