postgres-ops
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands using database utilities such as
psql,pg_dump,pg_restore,pg_basebackup,createdb, anddropdbto perform administrative tasks. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where untrusted data from database dumps or query results could influence agent behavior.
- Ingestion points: Database content is ingested via
pg_restoreduring restore operations andpsqlduring sanity checks in theSKILL.mdfile. - Boundary markers: The skill includes instructions to require explicit confirmation before production restores and to use temporary scratch databases for verification, which act as procedural boundaries.
- Capability inventory: The skill has the capability to execute shell commands via
Bashfor database management as defined in its instructions. - Sanitization: No specific automated sanitization or filtering of the database content is described before it is read by the agent.
Audit Metadata