postgresql-administration
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: This skill consists entirely of instructional Markdown files without any executable scripts or automation. All provided commands are for documentation purposes and manual execution by the user or agent.
- [COMMAND_EXECUTION]: The documentation includes standard PostgreSQL administrative commands such as pg_dump, pg_basebackup, and systemctl for managing services and backups. These commands are consistent with the skill's stated purpose as a database administration guide.
- [EXTERNAL_DOWNLOADS]: The hardening guide mentions the installation of the pgaudit extension using the standard system package manager (apt). This is a routine administrative task using official software repositories.
- [PROMPT_INJECTION]: The skill describes processes for monitoring database state and server logs, which creates an indirect prompt injection surface where untrusted database content could potentially influence agent behavior. However, the skill lacks automated ingestion logic. 1. Ingestion points: Database query results from pg_stat_activity (SKILL.md) and server logs (references/postgres-security-hardening.md). 2. Boundary markers: Absent. 3. Capability inventory: Shell command execution (systemctl, rm, pg_dump) and administrative SQL operations. 4. Sanitization: Absent.
Audit Metadata