postgresql-plpgsql

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides production-ready SQL templates for PostgreSQL functions and triggers. It correctly includes security best practices such as specifying SECURITY DEFINER alongside SET search_path to prevent search_path hijacking attacks.
  • [SAFE]: The inclusion of scripts/validate.py allows for local verification of the skill structure and configuration. The script uses yaml.safe_load() for parsing configuration files, which is a secure practice that prevents arbitrary code execution during YAML deserialization.
  • [SAFE]: The references/PATTERNS.md file encourages secure coding practices, specifically documenting proper input validation and explicit error handling while discouraging the unsafe practice of swallowing exceptions.
  • [SAFE]: No network operations, external downloads, or suspicious command executions were found in any of the skill's components. All scripts and configurations operate solely on local skill assets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 05:59 PM
Security Audit — agent-trust-hub — postgresql-plpgsql