The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to process database tasks and schema designs, which inherently involves an ingestion surface for untrusted user requirements. It mitigates this risk by defining clear boundaries, such as mandatory environment separation and requiring explicit user confirmation before any production database changes. The agent's capabilities (Bash, Write, Edit) are strictly scoped to the primary purpose of database management.
[CREDENTIALS_UNSAFE]: The instructions demonstrate safe secret management practices by advising users to store sensitive keys in environment files and providing .gitignore templates to prevent these credentials from being committed to version control.
[PRIVILEGE_ESCALATION]: The skill provides SQL templates for audit logging that utilize the security definer attribute. It correctly identifies the associated risks and incorporates industry-standard remediations, such as explicitly setting an empty search_path and revoking execution privileges from public roles to ensure the functions cannot be abused for unauthorized access.
[PERSISTENCE]: The skill utilizes pg_cron for database maintenance tasks, specifically for purging old audit logs according to defined retention periods. This is a standard administrative function for database hygiene and is documented as a built-in feature for the intended platform.

db-engineering