postgresql-pentesting

SUSPICIOUS/HIGH-RISK. The skill is internally consistent with its stated purpose, but that purpose is to give an AI agent offensive database exploitation capability, including credential attacks, file theft, RCE, reverse shells, exfiltration, and privilege escalation. The main risk is not deception but enabling autonomous attack behavior and data exfiltration; third-party/piped remote payload examples further raise security risk.

This fragment is a comprehensive PostgreSQL exploitation guide containing explicit instructions and payloads for RCE (COPY FROM PROGRAM, untrusted PL languages, LOAD of a malicious .so), persistent backdoors (config directives and session preload), privilege escalation (filenode editing of pg_authid, event triggers), file read/write, and credential extraction/exfiltration. While it is not software supply-chain code, it is highly actionable malicious guidance; if packaged into an OSS project, it constitutes severe security governance risk. No typical dependency supply-chain indicators are analyzable because there is no actual library/module code here.