syncore-schema-migrations
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of CLI commands via npx syncorejs for tasks such as checking migration status, generating SQL files, applying migrations, and running code generation.
- [EXTERNAL_DOWNLOADS]: The use of npx syncorejs triggers the download and execution of the syncorejs package from the npm registry.
- [PROMPT_INJECTION]: The skill processes user-provided schema definitions in syncore/schema.ts and migration files, which constitutes an indirect prompt injection surface.
- Ingestion points: syncore/schema.ts and SQL files in syncore/migrations/.
- Boundary markers: None identified.
- Capability inventory: Subprocess execution of the syncorejs CLI.
- Sanitization: None identified.
Audit Metadata