specsfy-specialist-postgres
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements and recommends security best practices for database management, such as the principle of least privilege for database roles (DML vs. DDL) and the use of database constraints (CHECK, UNIQUE, FK) to ensure data integrity.
- [SAFE]: External references target the official PostgreSQL documentation (postgresql.org), which is a well-known and trusted service for technical reference.
- [SAFE]: Migration and maintenance workflows include safety measures such as environment validation, backup/restore testing, and the use of non-blocking operations like
CREATE INDEX CONCURRENTLYand expand/contract patterns for schema changes. - [INDIRECT_PROMPT_INJECTION]: The skill processes database-related data (schemas, SQL, migrations) which acts as an ingestion point for user-provided content.
- Ingestion points: SQL queries, schema definitions, and migration plan inputs in
SKILL.md. - Boundary markers: Encourages explicit tagging of migration tasks (
[MIGRATION]). - Capability inventory: Advises on SQL design, query performance analysis using
EXPLAIN, and schema modifications. It does not contain capabilities for direct shell execution or network exfiltration. - Sanitization: Promotes the use of structured database roles and constraints to mitigate the risk of accidental or malicious data modification at the database level.
Audit Metadata