skill-system-postgres
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFENO_CODECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill package is composed entirely of SQL migration files, markdown documentation, and metadata descriptors. It does not contain any executable application code.\n- [COMMAND_EXECUTION]: The
SKILL.mdfile provides shell and PowerShell commands for users to manually initialize the database using thepsqlutility. These are documentation-based setup instructions.\n- [PROMPT_INJECTION]: The skill exposes an attack surface for indirect prompt injection via thelog-runandcheck-policyoperations.\n - Ingestion points: Parameters
policy_name,effects,skill_id,operation, andstatusenter the agent context viaSKILL.mdoperations.\n - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the SQL entrypoints.\n
- Capability inventory: The skill requires
db.readanddb.writepermissions to query and update the policy and run tables.\n - Sanitization: The manifest entrypoints describe natural language queries without specifying escaping or validation mechanisms for the input parameters.
Audit Metadata