mastering-postgresql
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the official Google Cloud SQL Proxy binary. This operation uses the official Google storage domain and is a standard requirement for secure database connectivity on GCP.\n- [REMOTE_CODE_EXECUTION]: The skill documents the process of downloading and executing the Cloud SQL Proxy binary. As the source is a trusted service (Google), this is considered a safe development practice.\n- [CREDENTIALS_UNSAFE]: Reference files for AWS, Azure, and GCP contain example commands and connection strings with placeholder credentials such as 'YourSecurePassword123!' and 'password'. These are clearly documented as templates for user customization.\n- [INDIRECT_PROMPT_INJECTION]:\n
- Ingestion points: Untrusted data from database records (titles, content) is read into the agent context via scripts like
vector_search.py.\n - Boundary markers: No specific boundary delimiters or isolation instructions are provided for processed database content.\n
- Capability inventory: The skill uses the Bash tool to execute Python scripts that perform database operations and can interact with the local filesystem.\n
- Sanitization: All provided Python scripts use parameterized SQL queries to safeguard against injection vulnerabilities.
Audit Metadata