DB migrations and schema changes
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill provides instructions to execute local commands for environment management.
- Evidence: Use of
uv run alembic,just ready,docker stop, andrm -rf ./data/postgres(SKILL.md). - Context: These commands are restricted to the local project directory and standard Docker management tasks consistent with the skill's primary purpose of database migration.
- [CREDENTIALS_UNSAFE] (SAFE): A hardcoded database connection string is present in several files.
- Evidence:
postgresql+pg8000://postgres:postgres@localhost:5432/letta-core(SKILL.md, references/migration-commands.md). - Context: The URI targets
localhostand uses default credentials (postgres:postgres), making it a benign documentation example for local development rather than a sensitive secret exposure.
Audit Metadata