dms-schema-conversion

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [AWS CLI Command Execution]: The skill makes extensive use of the aws command-line interface to manage AWS resources including DMS, S3, IAM, and Secrets Manager. This is the primary functional mechanism and is consistent with the skill's purpose as a migration tool.
  • [IAM Resource Management]: During setup, the skill creates IAM roles and policies. It correctly implements security best practices by including condition keys like aws:SourceAccount and aws:SourceArn in trust policies to mitigate cross-service confused deputy risks.
  • [Secure Credential Storage]: The skill uses AWS Secrets Manager to handle database credentials, avoiding hardcoded secrets or plain-text password prompts during the conversion workflow.
  • [Restricted File Permissions]: The instructions include applying chmod 600 to downloaded SQL scripts and recommending the deletion of local working copies after use, which helps protect sensitive metadata on the local filesystem.
  • [External Documentation References]: The skill instructs the agent to fetch and read official AWS documentation from docs.aws.amazon.com to ensure compatibility with current API versions and engine-specific requirements.
  • [Migration Script Generation]: The skill generates SQL fixes and PowerShell extraction scripts. These are designed to be presented to the user for review and confirmation before execution, facilitating a guided migration workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 12:28 PM
Security Audit — agent-trust-hub — dms-schema-conversion