database-design
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes a static analysis tool,
scripts/schema_validator.py, which processes external data in the form of schema files. - Ingestion points: The script reads files matching patterns like
**/prisma/schema.prismaor**/drizzle/*.tswithin a user-specified directory path provided via command-line arguments. - Boundary markers: None identified; the script reads the raw text of schema files.
- Capability inventory: The script performs local file system reads and directory traversal (globbing). It does not perform network operations, file writes, or command execution.
- Sanitization: The script uses regex patterns to extract model and enum definitions for naming and structure validation. It does not execute or evaluate the content of the files it reads.
Audit Metadata