postgresql-database-engineering
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation includes instructions for using
sudoto perform system-level tasks, such as installing packages viaapt-get, managing services withsystemctl, and editing configuration files in/etc/postgresql/. These are standard operations for the skill's primary purpose but grant significant privileges. - [EXTERNAL_DOWNLOADS]: The skill references downloading GPG keys and software packages from the official PostgreSQL repository (
postgresql.org), which is a recognized service for this technology. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection (Category 8) as it describes methods for ingesting and processing external data from database logs and schemas. * Ingestion points: Data entering the context from monitoring views (e.g.,
pg_stat_activity), query logs, and database schemas. * Boundary markers: No explicit instructions for delimiters or ignore-instructions warnings are provided. * Capability inventory: Includes execution of shell commands (psql,systemctl,pg_dump), file system modification (editing config, writing backup scripts), and network operations. * Sanitization: There are no described methods for sanitizing data retrieved from the database before it is used in subsequent agent actions.
Audit Metadata