skills/oakoss/agent-skills/pglite/Gen Agent Trust Hub

pglite

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of data from external synchronization servers and user-provided SQL queries, which constitutes a standard injection surface.
  • Ingestion points: Data is ingested through db.electric.syncShapeToTable in references/electric-sync.md and via SQL methods such as db.query and db.sql in references/queries-and-transactions.md.
  • Boundary markers: The documentation explicitly recommends the db.sql tagged template literal for automatic parameterization to mitigate SQL injection risks.
  • Capability inventory: The skill enables database persistence, transactional operations, and synchronization of data shapes from remote URLs.
  • Sanitization: Relies on the database engine's built-in support for parameterized queries and provides instructions on avoiding unsafe template literals for identifiers.
  • [EXTERNAL_DOWNLOADS]: The skill guides the user to install official library packages from the @electric-sql organization and suggests utilizing vendor-managed skill extensions via the skills CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:51 AM