@ruvector/postgres-cli

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill's primary functionality is delivered through system command execution via npx. This includes infrastructure management commands (install, start, stop, uninstall) and database utility operations.- [EXTERNAL_DOWNLOADS]: Fetches and executes the latest version of the @ruvector/postgres-cli package from the NPM registry at runtime during command execution.- [REMOTE_CODE_EXECUTION]: Provides the ability to execute arbitrary SQL commands provided by the user or read from local files via the psql subcommand, which operates as code execution within the database environment.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to its interaction with external data sources.
  • Ingestion points: Processes data from external files using --file flags in vector and psql commands, and retrieves information from database tables via vector search, graph queries, and learning store retrieval.
  • Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following commands embedded within the data retrieved from the database.
  • Capability inventory: The skill possesses significant capabilities including subprocess execution (npx), local file system read/write access for database management, and network communication for PostgreSQL connections.
  • Sanitization: No evidence of sanitization or validation of database query results or file contents is provided before the data is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 05:22 PM
Security Audit — agent-trust-hub — @ruvector/postgres-cli