db-performance-watchlist

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses prisma.$executeRaw and prisma.$queryRaw to interact with the database. These are used for legitimate monitoring purposes such as altering database settings for slow query logging (log_min_duration_statement) and querying PostgreSQL system catalogs (pg_stat_statements, pg_stat_database, pg_stat_user_indexes).
  • [DATA_EXPOSURE]: The skill accesses database metadata and performance statistics. While these provide insights into query patterns and resource usage, they do not target sensitive user data or hardcoded credentials. All access is performed within the database's own monitoring schema.
  • [REMOTE_CODE_EXECUTION]: The skill uses node-cron for scheduling monitoring tasks. The execution is limited to the skill's own functions (checkThresholds, generatePerformanceReport) and does not involve downloading or executing remote code from external sources.
  • [BEST_PRACTICE]: The scripts follow standard database administration practices for identifying performance bottlenecks, such as detecting unused indexes and monitoring connection pool utilization.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 09:30 AM
Security Audit — agent-trust-hub — db-performance-watchlist