The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides a shell script scripts/query-profiling.sh which automates database profiling by executing psql and mongosh commands. It uses variables for database connection parameters (host, port, user, database) which are passed as command-line arguments. While standard for administrative tools, users should ensure the inputs to these scripts are validated to prevent shell command injection.\n- [PRIVILEGE_ESCALATION]: The instructions in README.md and SKILL.md suggest operations that typically require elevated privileges, such as restarting system services via systemctl or copying configuration files to /etc/. These operations are consistent with the skill's primary purpose of database administration and optimization.\n- [INDIRECT_PROMPT_INJECTION]: The scripts/query-profiling.sh script represents an attack surface for indirect prompt injection if an agent is instructed to run it using data from an untrusted source as arguments (e.g., a database name provided by an external user). This risk is inherent to tools accepting shell arguments.

database-advanced-optimization