db-postgres
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive and standard technical guidance for PostgreSQL database administration. All code snippets and CLI commands align with documented best practices for DBA tasks, and placeholders are consistently used for all credentials and sensitive parameters.
- [COMMAND_EXECUTION]: The skill includes shell commands for database maintenance and replication (e.g.,
pg_basebackup,systemctl,pg_ctl) inreferences/replication.mdandreferences/maintenance.md. These are standard administrative tools consistent with the skill's primary purpose and use-case. - [INDIRECT_PROMPT_INJECTION]: The skill involves processing data from database query outputs and statistics. As per the mandatory evidence chain:
- Ingestion points: Data enters context through
EXPLAIN ANALYZEandpg_statview results as described inSKILL.mdandreferences/performance.md. - Boundary markers: None explicitly defined for these data inputs.
- Capability inventory: SQL command execution (CREATE, DROP, ALTER, UPDATE) and shell commands for service management (
pg_ctl,systemctl). - Sanitization: None specified for tool output processing. The risk is assessed as safe given the technical context and the skill's function as a specialist reference guide.
Audit Metadata