postgresql-optimization
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The workflow involves the agent processing external data from database environments, which presents a potential surface for indirect prompt injection.
- Ingestion points: Database query plans (EXPLAIN output), slow query logs, and PostgreSQL configuration parameters (SKILL.md).
- Boundary markers: Absent; there are no specific instructions provided to the agent to ignore or delimit instructions found within database-returned data.
- Capability inventory: The skill utilizes capabilities for SQL query execution, configuration modification, and monitoring setup (SKILL.md).
- Sanitization: No explicit sanitization or validation logic for database outputs is described in the workflow.
- [SAFE]: The skill incorporates references to official documentation and industry-standard tools for database management.
- Fetches execution plan guidance from the official PostgreSQL documentation domain.
- Integrates configuration and monitoring through well-known services including Grafana and Prometheus.
Audit Metadata