dms-schema-conversion
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [AWS CLI Command Execution]: The skill makes extensive use of the
awscommand-line interface to manage AWS resources including DMS, S3, IAM, and Secrets Manager. This is the primary functional mechanism and is consistent with the skill's purpose as a migration tool. - [IAM Resource Management]: During setup, the skill creates IAM roles and policies. It correctly implements security best practices by including condition keys like
aws:SourceAccountandaws:SourceArnin trust policies to mitigate cross-service confused deputy risks. - [Secure Credential Storage]: The skill uses AWS Secrets Manager to handle database credentials, avoiding hardcoded secrets or plain-text password prompts during the conversion workflow.
- [Restricted File Permissions]: The instructions include applying
chmod 600to downloaded SQL scripts and recommending the deletion of local working copies after use, which helps protect sensitive metadata on the local filesystem. - [External Documentation References]: The skill instructs the agent to fetch and read official AWS documentation from
docs.aws.amazon.comto ensure compatibility with current API versions and engine-specific requirements. - [Migration Script Generation]: The skill generates SQL fixes and PowerShell extraction scripts. These are designed to be presented to the user for review and confirmation before execution, facilitating a guided migration workflow.
Audit Metadata