Security audit
Security checks across malware telemetry and agentic risk
This is a real PostgreSQL memory skill, but it stores sensitive agent history and includes overbroad database setup, network exposure guidance, and unsafe backup/restore paths that need review before use.
Install only if you intentionally want agents to persist searchable conversation and tool history. Use a dedicated least-privilege PostgreSQL role, restrict PostgreSQL to localhost/VPN or specific trusted IPs, avoid 0.0.0.0/0 examples, lock down config files containing passwords, and review backup/restore scripts before using them with untrusted paths or shared databases.
# Add compression if requested
if compress:
cmd_str = " ".join(cmd) + f" | gzip > {backup_path}"
result = subprocess.run(cmd_str, shell=True, capture_output=True, text=True)
else:
# Run pg_dump and redirect to file
with open(backup_path, 'w') as f:"-d", "postgres",
"-c", f"DROP DATABASE IF EXISTS {db_name};"
]
subprocess.run(cmd, capture_output=True)
cmd = [
"psql","-d", "postgres",
"-c", f"CREATE DATABASE {db_name};"
]
subprocess.run(cmd, capture_output=True)
# Restore from backup
is_compressed = str(backup_path).endswith('.gz')if is_compressed:
cmd_str = f"gunzip -c {backup_path} | psql -h {db_host} -p {db_port} -U {db_user} -d {db_name}"
result = subprocess.run(cmd_str, shell=True, capture_output=True, text=True)
else:
cmd = [
"psql",66/66 vendors flagged this skill as clean.