databases
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The
SKILL.mddocumentation includes setup instructions that utilizesudofor installing database packages (apt-get install) and managing system services (systemctl start). These are standard procedures for database setup but require elevated permissions. - [COMMAND_EXECUTION]: The utility script
scripts/db_backup.pyconstructs and executes shell commands using thesubprocessmodule to call database CLI tools such asmongodump,mongorestore,pg_dump, andpsql. The script uses the secure list-based construction for commands to prevent shell injection. - [DYNAMIC_EXECUTION]: The
scripts/db_migrate.pyscript reads SQL instructions from local JSON migration files and executes them against the database usingcur.execute(). This is the intended functionality of a migration manager. - [INDIRECT_PROMPT_INJECTION]: The
scripts/db_performance_check.pyscript acts as a potential surface for indirect prompt injection as it reads query history logs directly from the database to identify slow queries. - Ingestion points: Reads database query logs from
system.profile(MongoDB) andpg_stat_statements(PostgreSQL) inscripts/db_performance_check.py. - Boundary markers: None.
- Capability inventory: The skill includes scripts capable of executing database CLI commands via
subprocessand writing to the file system. - Sanitization: The analyzer script truncates long query strings before displaying them in the report.
Audit Metadata