schema-migration

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes bash to execute git show for retrieving historical versions of SQL models. This operation is limited to the local repository context and is a standard requirement for version comparison in developer workflows.
  • [PROMPT_INJECTION]: The skill ingests external SQL and DDL files for structural analysis, which constitutes an indirect prompt injection surface. Evidence Chain: 1. Ingestion points: Reads migration files and dbt models from disk (SKILL.md). 2. Boundary markers: No specific delimiters or instructions to ignore embedded content are provided. 3. Capability inventory: The skill utilizes bash (git operations), read, and glob (file system access). 4. Sanitization: No explicit content validation or sanitization is performed on the ingested SQL text before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 11:11 AM