skills/jeremylongshore/claude-code-plugins-plus-skills/analyzing-query-performance/Gen Agent Trust Hub
analyzing-query-performance
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute database diagnostic commands using CLI tools like
psql,mysql, andmongosh. These operations are used to retrieve execution plans and performance statistics, which is consistent with the skill's primary objective of query optimization.\n- [PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it processes output from external data sources like database slow query logs and EXPLAIN plans.\n - Ingestion points: The agent reads data from
pg_stat_statements,performance_schema, and query execution plans obtained via database commands.\n - Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the database output.\n
- Capability inventory: The skill uses database interaction tools (
psql,mysql,mongosh) and file system operations (Read,Write,Edit) to perform its tasks.\n - Sanitization: No explicit sanitization or validation logic is specified for the data ingested from the database sources.
Audit Metadata