The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes raw SQL commands via Prisma's $executeRaw and $queryRaw methods to monitor performance and configure database settings, such as modifying log_min_duration_statement in scripts/detect-slow-queries.ts.
[DATA_EXPOSURE]: The monitoring scripts access sensitive system-level views including pg_stat_statements and pg_stat_activity. These views contain query strings and session information that may expose sensitive application data if literals were included in database queries.
[PRIVILEGE_ESCALATION]: The skill utilizes administrative database commands (ALTER DATABASE SET ...) which require elevated database privileges (typically superuser or database owner) to modify the database configuration at runtime.
[INDIRECT_PROMPT_INJECTION]: The skill ingests and outputs untrusted data from the database's query history, creating a vulnerability surface where malicious queries executed against the database could influence the agent's monitoring output.
Ingestion points: The detectSlowQueries function in scripts/detect-slow-queries.ts reads query text directly from the pg_stat_statements system table.
Boundary markers: None identified for the display of query text.
Capability inventory: The skill can execute arbitrary SQL commands and generate alerts based on the ingested data.
Sanitization: The skill applies basic truncation to query strings (substring(0, 80)) before logging them to the console.

db-performance-watchlist