schema-architect
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill logic is entirely focused on architectural design and documentation. It does not include commands for unauthorized network access, credential harvesting, or system modification.- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection because it processes untrusted business requirements and external schema files (e.g., schema.prisma). 1. Ingestion points: User-provided business requirements and local schema files mentioned in the documentation phase. 2. Boundary markers: Absent; there are no specific instructions to ignore embedded commands in the processed data. 3. Capability inventory: The skill performs file writes to the docs/database-report/ directory and suggests database introspection tools. 4. Sanitization: Absent; no validation logic for input data is defined.
Audit Metadata