pg-durable-sql

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • Network Operations Capability: The skill documents the df.http() function, which allows the durable function workflows to perform HTTP requests (GET, POST, etc.). This is a core feature of the extension for integrating with external APIs and services.
  • SQL Execution Workflow: The df.start() function is documented as the primary mechanism for executing the durable function DSL graphs. This capability is used to trigger the sequence of SQL operations defined in the workflow.
  • Variable and Secret Handling: The documentation includes examples of using df.setvar() for managing workflow variables, including a pattern for using API keys in headers. Users should follow best practice for secret management when implementing these patterns in production environments.
  • Indirect Data Processing: The skill describes patterns where workflows ingest data from external sources via df.http() or df.wait_for_signal(). This establishes a data flow where external content is processed by the agent's workflow logic, which is a standard pattern for event-driven automation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 02:54 PM
Security Audit — agent-trust-hub — pg-durable-sql