postgresql

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses sudo for service management, configuration updates, and database access (e.g., sudo -u postgres psql). This is standard for system administration tasks.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing software such as postgresql-16, pgbouncer, and pg_repack via system package managers (apt, dnf). These sources are well-known and official registries.
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8). It is designed to process external configuration files like postgresql.conf and pg_hba.conf which could be modified by an attacker to include hidden instructions.
  • Ingestion points: postgresql.conf, pg_hba.conf, pg_ident.conf (referenced via globs in SKILL.md).
  • Boundary markers: No explicit markers or warnings to ignore embedded instructions are present in the provided templates.
  • Capability inventory: The skill can execute system commands (systemctl, ufw), install packages, and perform database operations.
  • Sanitization: No sanitization of file content is specified before processing or interpreting configuration directives.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 01:37 PM
Security Audit — agent-trust-hub — postgresql