multi-database-and-replicas

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill demonstrates secure configuration practices by using environment variables (e.g., ENV["DB_PASSWORD"], ENV["DB_USER"]) in the provided database.yml templates instead of hardcoding sensitive credentials.
  • [EXTERNAL_DOWNLOADS]: The skill references official documentation and well-known open-source tools including the Ruby on Rails guides, PostgreSQL documentation, PgBouncer, and the Trilogy MySQL adapter. These are established industry-standard resources.
  • [COMMAND_EXECUTION]: While the skill provides code to execute SQL queries for replica lag monitoring (e.g., pg_last_xact_replay_timestamp()), these queries are hardcoded and intended for performance monitoring within the application context.
  • [DATA_EXFILTRATION]: No evidence of unauthorized network operations, data exfiltration, or access to sensitive local file paths (e.g., SSH keys, cloud credentials) was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 03:48 AM
Security Audit — agent-trust-hub — multi-database-and-replicas