skills/tencentcloudbase/cloudbase-ai-toolkit/postgresql-best-practices-cloudbase/Gen Agent Trust Hub
postgresql-best-practices-cloudbase
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data in the form of SQL queries and application code, which could be used to influence the agent's behavior.
- Ingestion points: User-provided SQL statements, endpoint implementations, and UI flow descriptions are ingested during the design and review workflow.
- Boundary markers: The skill does not define specific markers or delimiters to isolate user-supplied content from its own instructions.
- Capability inventory: The skill utilizes
queryPgDatabasefor SQL execution,applyMigrationfor database schema updates, andqueryEnvfor environment metadata collection. - Sanitization: The skill documents a platform-level restriction where
queryPgDatabaseenforces a read-only gate that rejects potentially mutating operations likeANALYZE. - [COMMAND_EXECUTION]: The skill facilitates the execution of database-related commands through platform-specific tools.
- The skill instructs the agent to perform database inspections and schema migrations using
queryPgDatabase,applyMigration, andqueryEnv. - These operations are documented as part of the intended vendor-provided functionality for managing the CloudBase environment.
Audit Metadata