database-advanced-optimization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/query-profiling.sh, the required runtime workflow executes PostgreSQL/MongoDB profiling queries that read and stringify existing database free-text fields (e.g., pg_stat_statements.query and doc.command/query), which can include outsider-authored SQL/queries previously submitted to the monitored databases.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill includes explicit privileged operations (systemctl stop/start, copying/restoring files under /var/lib and /backup, and backup commands) that modify system services and filesystem state and therefore push the agent to perform actions requiring sudo/root.