planetscale-safe-orchestrator
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate administrative orchestrator authored by PlanetScale. It implements a strict 'read-only' safety contract and relies on official CLI tools and API endpoints to perform its assessment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including repository code (Phase 7), database schema (Phase 6), and query telemetry (Phase 3). While these are ingestion points for potentially untrusted data, the skill mitigates this risk by requiring human-in-the-loop approval for all changes and providing specific instructions to ignore ambiguous authorization commands from processed data.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and API schemas from the
planetscale.comdomain. These references are used to ensure the agent uses correct command syntax and follows established best practices. - [COMMAND_EXECUTION]: The skill orchestrates the use of the
pscaleCLI tool. This is the official management utility for the vendor's platform and is used here primarily for inventory and assessment tasks under a restricted safety protocol.
Audit Metadata