513-frameworks-micronaut-db-migrations-flyway
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard build commands (
./mvnw compile,mvn clean verify) to ensure the project remains in a valid state during the migration process. This is consistent with the primary purpose of a software development skill. - [PROMPT_INJECTION]: An indirect prompt injection surface is present as the skill processes local project files to perform its tasks. • Ingestion points: Local files including
pom.xml,application.yml, and SQL migration scripts insrc/main/resources/db/migration. • Boundary markers: Not explicitly implemented in the skill instructions. • Capability inventory: Execution of Maven commands via shell subprocesses. • Sanitization: No specific sanitization or validation logic for external project data is detailed in the instructions.
Audit Metadata