postgresql-development-cloudbase

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the managePgDatabase and queryPgDatabase tools to execute SQL commands for database management and schema migrations. This is the intended primary purpose of the skill.
  • [EXTERNAL_DOWNLOADS]: References official Node.js packages (@cloudbase/js-sdk, @cloudbase/node-sdk) and provides links to official Tencent Cloud documentation and source code repositories on cnb.cool and cloudbase.net.
  • [DATA_EXFILTRATION]: Provides clear warnings and best practices regarding the handling of sensitive credentials like API Keys and SecretKeys, explicitly advising against exposing them in frontend code.
  • [PROMPT_INJECTION]: Employs instructional headers (e.g., "CRITICAL", "Golden rule") to ensure developers use the correct API syntax (PostgreSQL-native vs NoSQL), but does not contain attempts to bypass agent safety guidelines.
  • [SAFE]: The skill correctly implements security best practices by teaching the use of Row Level Security (RLS) and database-level permissions (GRANTs) to secure application data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 08:46 AM
Security Audit — agent-trust-hub — postgresql-development-cloudbase