postgresql-database-engineering
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides instructions and shell scripts that use
sudofor system-level administrative tasks. This includes installing official packages (postgresql-15), modifying configuration files within protected directories such as/etc/postgresql/, and managing system services viasystemctl. These operations are standard and necessary for database engineering and administration. - [EXTERNAL_DOWNLOADS]: Installation instructions in
README.mdfetch the official GPG signing key and repository definitions frompostgresql.org. As a well-known and official domain for the software, this is considered a safe and trusted source for external references. - [COMMAND_EXECUTION]: The skill includes scripts for routine operational maintenance, such as the
comprehensive_backup.shscript inEXAMPLES.md. These scripts utilize standard utilities includingpg_dump,pg_basebackup, andrsyncto perform database backups and replication. The capabilities are aligned with the stated educational and professional purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill defines procedures for ingesting and processing data from database tables (identified in
SKILL.mdandEXAMPLES.md) which may originate from untrusted sources. It documents powerful capabilities like file writing and network synchronization. To mitigate this surface, the skill explicitly guides the user on implementing security best practices such as Row-Level Security (RLS) and Role-Based Access Control (RBAC).
Audit Metadata