production-postgres
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The template code for database health monitoring uses dynamic loading to access library functions at runtime.
- Evidence: The function
check_sqlalchemy_engine_healthintemplates/connection_pool.pyuses__import__("sqlalchemy")to dynamically load the library and execute a connectivity test. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon untrusted data from the user's codebase, such as database schemas and migration scripts, creating an attack surface for embedded instructions.
- Ingestion points: SQL migration files, SQLAlchemy/Django/Prisma models, and database schema definitions provided in the agent's context.
- Capability inventory: The skill provides patterns for managing database connections, executing schema migrations, and managing indexes.
- Boundary markers: While the skill promotes safe database practices, it does not explicitly define prompt-level delimiters to separate instructions from the processed database code.
- Sanitization: The instructions mitigate runtime risks by enforcing strict timeouts (
lock_timeout,statement_timeout) and batching large operations.
Audit Metadata