database-optimizer
Warn
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for system analysis and service management. Evidence includes monitoring commands like 'free -h', 'cat /proc/cpuinfo', and 'df -h' in REFERENCE.md. Furthermore, the skill provides instructions for administrative actions using 'sudo systemctl restart postgresql' to apply database configuration changes.\n- [PROMPT_INJECTION]: The skill processes untrusted data from database outputs, creating a surface for indirect prompt injection. \n
- Ingestion points: The skill ingests results from 'EXPLAIN ANALYZE' and 'pg_stat_statements' queries as described in SKILL.md and REFERENCE.md. \n
- Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed database output. \n
- Capability inventory: The skill has the capability to execute shell commands ('systemctl', 'psql') and perform SQL operations. \n
- Sanitization: There is no evidence of sanitization or validation of the ingested database data before it is processed by the agent.
Audit Metadata