pg-durable-sql
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill documents functions such as
df.httpanddf.wait_for_signalthat ingest data from external sources into the durable function workflow. While these are core features of the pg_durable extension, they represent a potential surface area where untrusted external content could be introduced into the agent's context if the output is processed without further sanitization. - Network Communication Capabilities: The documentation includes the
df.httpfunction, which allows durable functions to perform HTTP operations (GET, POST, etc.) for tasks like ETL pipelines and webhooks. These capabilities are intended features of the extension being documented. - Variable and Secret Handling: The skill explains how to manage variables using
df.setvarand{var}substitution. The provided examples use standard placeholder values (e.g., 'secret123') to illustrate how to capture configuration values before a workflow starts, which is a common practice for managing credentials in this framework.
Audit Metadata