db-migrate
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates and instructions for executing dotnet CLI commands locally. These commands manage database migrations, including adding migrations, updating the database, and listing status, which are standard DevOps operations.
- [PROMPT_INJECTION]: The skill uses instructions to enforce a specific task-management workflow (via TaskCreate). It also processes external inputs and local documentation, creating an indirect prompt injection surface. 1. Ingestion points: User-provided $ARGUMENTS and local files like docs/project-reference/domain-entities-reference.md. 2. Boundary markers: Absent. 3. Capability inventory: Execution of dotnet CLI tools in the local environment. 4. Sanitization: Absent, though the skill directs the agent to apply critical thinking and verify claims with proof.
Audit Metadata