Security audit
Security checks for vulnerabilities and agentic risk
This PostgreSQL MCP helper is a disclosed database administration skill, but users should limit write access and review SQL before execution.
Install only if you intend to connect an agent to a PostgreSQL MCP server. Use a least-privilege database account, prefer read-only access for production, and require explicit confirmation before any UPDATE, DELETE, DROP, ALTER, or other write operation.
The routing examples use ambiguous everyday terms like '安装', '配置', '很慢', and '帮我看看', which can match casual user phrasing without clear intent to operate on a database. In a skill that can guide or initiate database actions, ambiguous examples raise the risk of misrouting into operational flows, potentially leading to unnecessary querying, analysis, or preparation for write actions.
The trigger condition '需要数据库操作、SQL查询、数据存储管理时使用' is very broad and can match many normal conversations about software development or data handling. Over-broad activation increases the chance that the skill is invoked in contexts the user did not intend, which is especially risky here because the skill exposes read/write/exec pathways related to a live database environment.
The skill describes itself as a knowledge-base style skill, but elsewhere instructs operational troubleshooting steps that involve exec-style system commands such as running setup and ping/network diagnostics. In an agent environment with exec capability, this mismatch can cause the agent to perform host-level actions users did not clearly intend, expanding impact beyond database guidance into command execution.
No suspicious patterns detected.
