pscale-deploy-request
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
pscaleCLI for database operations. These commands are well-documented and follow standard administrative patterns for schema management. - [COMMAND_EXECUTION]: The script
scripts/deploy-schema-change.shimplements a robust automation workflow. It includes avalidate_safe_namefunction to sanitize input parameters (DATABASE,BRANCH,ORG) using a restrictive regex (^[a-zA-Z0-9._-]+$), effectively preventing shell injection attacks. - [REMOTE_CODE_EXECUTION]: While the skill references external integrations (e.g., Drizzle ORM, GitLab CLI), it does not download or execute untrusted remote code at runtime. Dependencies mentioned are standard development tools.
- [PROMPT_INJECTION]: The documentation uses clear, instructional language without attempting to bypass safety filters or override agent behavior.
- [DATA_EXFILTRATION]: No patterns of sensitive data exfiltration (such as harvesting credentials or environment variables for external transmission) were found. Commands that output data (e.g.,
--format json) are used for local inspection and script processing.
Audit Metadata