databases

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The SKILL.md documentation includes setup instructions that utilize sudo for installing database packages (apt-get install) and managing system services (systemctl start). These are standard procedures for database setup but require elevated permissions.
  • [COMMAND_EXECUTION]: The utility script scripts/db_backup.py constructs and executes shell commands using the subprocess module to call database CLI tools such as mongodump, mongorestore, pg_dump, and psql. The script uses the secure list-based construction for commands to prevent shell injection.
  • [DYNAMIC_EXECUTION]: The scripts/db_migrate.py script reads SQL instructions from local JSON migration files and executes them against the database using cur.execute(). This is the intended functionality of a migration manager.
  • [INDIRECT_PROMPT_INJECTION]: The scripts/db_performance_check.py script acts as a potential surface for indirect prompt injection as it reads query history logs directly from the database to identify slow queries.
  • Ingestion points: Reads database query logs from system.profile (MongoDB) and pg_stat_statements (PostgreSQL) in scripts/db_performance_check.py.
  • Boundary markers: None.
  • Capability inventory: The skill includes scripts capable of executing database CLI commands via subprocess and writing to the file system.
  • Sanitization: The analyzer script truncates long query strings before displaying them in the report.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:33 PM