enterprise-migration-scenario
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external legacy documentation which constitutes a data ingestion surface where untrusted content could influence the output.
- Ingestion points: The skill parses existing legacy documentation in Step 1 of the audit process.
- Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" warnings for the legacy documentation ingestion.
- Capability inventory: The skill generates architectural plans (core/PLAN.md) and SQL/migration scripts intended for execution.
- Sanitization: The skill proactively addresses this risk by mandating "strict input sanitization on any LLM-generated SQL or scripting intended for migration execution."
Audit Metadata