timescaledb
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill's instructions and provided SQL snippets are consistent with legitimate database administration and optimization tasks for TimescaleDB. All external references point to official documentation and the main project repository on GitHub, which are recognized as trusted and well-known sources. No evidence of data exfiltration, credential harvesting, or malicious command execution was found.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and act upon user-controlled SQL and source code files, which creates an inherent attack surface for indirect prompt injection.
- Ingestion points: The skill triggers on and reads files matching patterns like
**/*hypertable*,**/*timeseries*, and**/*metrics*, or files containing specific TimescaleDB function calls. - Boundary markers: There are no defined boundary markers or specific instructions for the agent to ignore potentially malicious commands embedded within the data it ingests.
- Capability inventory: The skill has access to file system tools (
Read,Grep,Glob), shell execution (Bash), and GitHub interaction tools. - Sanitization: The skill does not specify any sanitization, validation, or escaping procedures for the content of the files it processes.
Audit Metadata