pgpm

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs users to utilize eval "$(pgpm env)" to load PostgreSQL environment variables directly into the current shell session. This is a standard workflow for CLI-driven environment management.
  • [COMMAND_EXECUTION]: Orchestrates local infrastructure via pgpm docker start and pgpm docker stop, which manages the lifecycle of PostgreSQL Docker containers.
  • [EXTERNAL_DOWNLOADS]: Downloads software packages from npm, including the core pgpm CLI and various @pgpm/* modules used for database functionality.
  • [EXTERNAL_DOWNLOADS]: Fetches Docker container images from Docker Hub, specifically the pyramation/postgres:17 image, to provide a local database environment.
  • [REMOTE_CODE_EXECUTION]: The pgpm init --repo <url> command enables project initialization from remote Git repositories, which facilitates the use of external templates.
  • [PERSISTENCE]: Recommends adding environment-loading commands (eval "$(pgpm env)") to shell configuration files like ~/.bashrc or ~/.zshrc for automated environment setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 12:27 PM