postgresql-database-engineering

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill provides instructions and shell scripts that use sudo for system-level administrative tasks. This includes installing official packages (postgresql-15), modifying configuration files within protected directories such as /etc/postgresql/, and managing system services via systemctl. These operations are standard and necessary for database engineering and administration.
  • [EXTERNAL_DOWNLOADS]: Installation instructions in README.md fetch the official GPG signing key and repository definitions from postgresql.org. As a well-known and official domain for the software, this is considered a safe and trusted source for external references.
  • [COMMAND_EXECUTION]: The skill includes scripts for routine operational maintenance, such as the comprehensive_backup.sh script in EXAMPLES.md. These scripts utilize standard utilities including pg_dump, pg_basebackup, and rsync to perform database backups and replication. The capabilities are aligned with the stated educational and professional purpose of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines procedures for ingesting and processing data from database tables (identified in SKILL.md and EXAMPLES.md) which may originate from untrusted sources. It documents powerful capabilities like file writing and network synchronization. To mitigate this surface, the skill explicitly guides the user on implementing security best practices such as Row-Level Security (RLS) and Role-Based Access Control (RBAC).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:57 PM
Security Audit — agent-trust-hub — postgresql-database-engineering