sonamu-migration
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
pnpm sonamuCLI commands to perform database operations, including status checks, migration generation, and execution of DDL changes. - [DYNAMIC_EXECUTION]: The tool generates TypeScript migration files at runtime within the
src/migrationsdirectory and subsequently executes them to modify database schemas. This behavior is central to its purpose as a migration manager. - [INDIRECT_PROMPT_INJECTION]: The skill ingests entity definitions from
src/application/**/*.entity.jsonto produce executable migration scripts. This flow creates a surface where malicious content in the JSON definitions could influence the resulting code. - Ingestion points: Entity definition files located at
src/application/**/*.entity.json. - Boundary markers: No specific delimiters or warnings for embedded instructions in the JSON data are documented.
- Capability inventory: The
pnpm sonamu migrate apply --executecommand provides the capability to execute the generated migration files. - Sanitization: The documentation does not detail any validation or sanitization steps performed on the entity definitions before code generation.
Audit Metadata