pscale-pgbouncer
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is centered around executing the
pscaleCLI to manage cloud database resources. This includes operations with significant impact, such aspscale pgbouncer delete(which includes a--forceflag) andpscale pgbouncer resize. The skill mitigates this by requiring user approval for destructive or capacity-changing operations. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and act upon data returned from the
pscaleCLI in JSON format. This creates a surface for indirect prompt injection if the external API returns malicious content. - Ingestion points: Commands such as
pscale pgbouncer list,pscale pgbouncer show, andpscale pgbouncer resize statusreturn data from the PlanetScale API that is processed by the agent. - Boundary markers: The instructions do not define explicit boundary markers or warnings to the agent to treat the CLI output as untrusted data.
- Capability inventory: The skill has the capability to modify infrastructure (resize, create, delete) via the
pscaleCLI. - Sanitization: There are no explicit sanitization or validation steps defined for the data returned by the CLI before it is used to inform subsequent actions.
Audit Metadata