db-migrate
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
npx medusa db:migratevia the Bash tool. This is a standard operational command for Medusa applications and is appropriately scoped to the vendor's official CLI tools.- [EXTERNAL_DOWNLOADS]: The use ofnpxmay involve fetching themedusapackage from the npm registry. Asmedusais the primary package for the authoring vendor (medusajs), this is considered expected and safe behavior.
Audit Metadata