database-optimization
Audited by Socket on Feb 26, 2026
1 alert found:
SecurityThis skill appears to be a benign, coherent database optimization guide with supporting helper code for Prisma/PostgreSQL. It does include code that executes raw SQL and performs schema-modifying actions (CREATE TABLE partitions, DROP TABLE), and it interpolates identifiers/values into raw queries. Those patterns are appropriate for a DB-admin tool but carry operational and security risk if inputs are untrusted or if the code is run with elevated privileges in production without safeguards. There are no signs of credential harvesting, remote downloads, obfuscation, or exfiltration to attacker-controlled endpoints. Recommendations: ensure raw SQL identifier/value interpolation is properly sanitized or parameterized, add explicit checks/confirmations or dry-run modes before destructive DDL (DROP TABLE), and run with least privilege credentials.