schema-migration
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
bashtool to execute shell commands, specificallygit show, to retrieve previous versions of files from the Git history for schema comparison. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted DDL migrations, SQL models, and YAML schema definitions, which creates a surface for indirect prompt injection attacks.
- Ingestion points: DDL migration files, dbt SQL models, and schema.yml files read from the filesystem (SKILL.md, Workflow Step 1).
- Boundary markers: No explicit delimiters or instructions to ignore embedded prompts are provided in the workflow.
- Capability inventory:
bash(for git operations),read,glob, and various schema analysis tools (altimate_core_migration,altimate_core_schema_diff,schema_diff). - Sanitization: The instructions do not specify any sanitization, filtering, or escaping of the external file content before it is processed by the analysis tools.
Audit Metadata