postgresql
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
sudofor service management, configuration updates, and database access (e.g.,sudo -u postgres psql). This is standard for system administration tasks. - [EXTERNAL_DOWNLOADS]: The skill recommends installing software such as
postgresql-16,pgbouncer, andpg_repackvia system package managers (apt,dnf). These sources are well-known and official registries. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (Category 8). It is designed to process external configuration files like
postgresql.confandpg_hba.confwhich could be modified by an attacker to include hidden instructions. - Ingestion points:
postgresql.conf,pg_hba.conf,pg_ident.conf(referenced via globs inSKILL.md). - Boundary markers: No explicit markers or warnings to ignore embedded instructions are present in the provided templates.
- Capability inventory: The skill can execute system commands (
systemctl,ufw), install packages, and perform database operations. - Sanitization: No sanitization of file content is specified before processing or interpreting configuration directives.
Audit Metadata