postgresql-plpgsql
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides production-ready SQL templates for PostgreSQL functions and triggers. It correctly includes security best practices such as specifying
SECURITY DEFINERalongsideSET search_pathto prevent search_path hijacking attacks. - [SAFE]: The inclusion of
scripts/validate.pyallows for local verification of the skill structure and configuration. The script usesyaml.safe_load()for parsing configuration files, which is a secure practice that prevents arbitrary code execution during YAML deserialization. - [SAFE]: The
references/PATTERNS.mdfile encourages secure coding practices, specifically documenting proper input validation and explicit error handling while discouraging the unsafe practice of swallowing exceptions. - [SAFE]: No network operations, external downloads, or suspicious command executions were found in any of the skill's components. All scripts and configurations operate solely on local skill assets.
Audit Metadata