planetscale
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
pscaleCLI binary from PlanetScale's official GitHub repository during the installation process. - [PRIVILEGE_ESCALATION]: Recommends the use of
sudo dpkg -ito install the downloaded database CLI package on Linux systems. - [COMMAND_EXECUTION]: Instructs the agent to perform administrative database tasks, including creating/deleting databases and managing branches using the
pscaleCLI and Docker Compose. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest data from external sources, which constitutes an injection surface:
- Ingestion points: Data is ingested through
pscale shellquery results andpscale apiorganization statistics (SKILL.md). - Boundary markers: No delimiters or instructions to ignore embedded content are provided for the ingested data.
- Capability inventory: The skill has capabilities for database mutation, branch deployment, and credential management via the
pscaleCLI. - Sanitization: No sanitization or validation of the external database/API output is specified.
Audit Metadata