ghost-database
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation provides commands to download and execute installation scripts directly from the product's official domain (ghost.build) and the vendor's repository on a well-known package hosting service (packagecloud.io).
- [COMMAND_EXECUTION]: Instructions include the use of sudo with system package managers (apt-get and yum) to install the Ghost CLI and manage the MCP server environment.
- [EXTERNAL_DOWNLOADS]: Fetches installation assets, repository configurations, and setup scripts from ghost.build and packagecloud.io.
- [PROMPT_INJECTION]: The skill facilitates processing external data from PostgreSQL databases, which represents a surface for indirect prompt injection.
- Ingestion points: Database query results from ghost_sql and LLM-optimized schema data from ghost_schema in SKILL.md.
- Boundary markers: Not present in the provided tool usage instructions.
- Capability inventory: Full database lifecycle management including creation, forking, and deletion (ghost_create, ghost_fork, ghost_delete) as well as arbitrary SQL execution (ghost_sql).
- Sanitization: No specific output sanitization or escaping mechanisms are described in the documentation.
Audit Metadata