pglite
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of data from external synchronization servers and user-provided SQL queries, which constitutes a standard injection surface.
- Ingestion points: Data is ingested through
db.electric.syncShapeToTableinreferences/electric-sync.mdand via SQL methods such asdb.queryanddb.sqlinreferences/queries-and-transactions.md. - Boundary markers: The documentation explicitly recommends the
db.sqltagged template literal for automatic parameterization to mitigate SQL injection risks. - Capability inventory: The skill enables database persistence, transactional operations, and synchronization of data shapes from remote URLs.
- Sanitization: Relies on the database engine's built-in support for parameterized queries and provides instructions on avoiding unsafe template literals for identifiers.
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install official library packages from the
@electric-sqlorganization and suggests utilizing vendor-managed skill extensions via theskillsCLI tool.
Audit Metadata