sql-migrations

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides scripts (migration-manager.sh and migration-tool.py) intended to execute SQL commands against a database from local migration files. This is the core functionality for the stated purpose of database schema management.
  • [DATA_EXPOSURE]: The skill correctly demonstrates using environment variables (DATABASE_URL) and process environment access for database credentials rather than hardcoding sensitive information.
  • [DYNAMIC_EXECUTION]: The Python script migration-tool.py uses cursor.execute(f.read()) to dynamically run SQL from files within a migrations/ directory. This is standard behavior for migration tools to apply incremental schema changes.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to install well-known and trusted development dependencies such as prisma, @prisma/client, drizzle-orm, and drizzle-kit via standard package managers.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 01:22 AM