motherduck-migrate-to-motherduck

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's behavior is consistent with its stated purpose of providing migration guidance and validation tools for MotherDuck environments.- [COMMAND_EXECUTION]: The skill provides instructions to execute local validation artifacts, such as artifacts/migration_validation_example.py, using the uv command. These are intended for verifying migration results and do not involve remote code execution from untrusted sources.- [INDIRECT_PROMPT_INJECTION]: The skill has an inherent surface area for indirect prompt injection because it is designed to ingest and analyze data from external source databases.
  • Ingestion points: The skill reads table schemas, metrics, and records from external systems like Snowflake, Redshift, and PostgreSQL during the migration and validation workflow.
  • Boundary markers: None explicitly defined in instructions, though the focus is on aggregate metrics rather than free-form text processing.
  • Capability inventory: The skill utilizes duckdb for database queries and includes local Python/TypeScript scripts for orchestration.
  • Sanitization: The provided scripts use standard database connection methods and focus on numeric aggregations for validation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 06:31 PM