database-migration
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill references local executable assets, specifically 'scripts/test-migration.sh' and 'assets/data-migration-script.py', to perform migration testing and data utilities. This indicates a capability to execute shell and Python commands on the host environment.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes user-provided migration goals and database constraints as inputs.
- Ingestion points: User goals and constraints defined in the instructions section of 'SKILL.md'.
- Boundary markers: Absent; there are no delimiters or specific instructions to disregard malicious content within user-provided data.
- Capability inventory: Execution of shell scripts ('scripts/test-migration.sh'), Python scripts ('assets/data-migration-script.py'), and raw SQL queries through ORM interfaces ('queryInterface.sequelize.query' in code examples).
- Sanitization: Absent; no methods for escaping or validating user-provided schema names or data types are documented.
Audit Metadata