azure-postgres
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several bash scripts (
setup-user.sh,setup-group.sh,setup-managed-identity.sh, andmigrate-to-entra.sh) that execute Azure CLI (az) and PostgreSQL (psql) commands using user-supplied arguments to manage infrastructure and database permissions. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of resource names, database names, and user identities which are interpolated into shell commands, creating a potential injection surface if malicious inputs are provided to the agent.
- Ingestion points: Command-line arguments for the setup and migration scripts included in the skill.
- Boundary markers: Bash variable quoting is used to prevent simple word splitting, but no explicit boundary markers or delimiters are provided for the input values.
- Capability inventory: The skill utilizes administrative tools including the Azure CLI and the
psqlclient to create roles, modify server parameters, and grant database-level permissions. - Sanitization: No explicit input validation, sanitization, or filtering is implemented in the bash scripts to verify the integrity of the supplied arguments.
Audit Metadata