alembic

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run several shell commands including pip install, alembic init, alembic revision, and alembic upgrade. These are standard operations for the tool's intended purpose of managing database schemas in a development and production lifecycle.
  • [EXTERNAL_DOWNLOADS]: The skill uses pip install alembic to fetch the Alembic package from the official Python Package Index (PyPI), which is a trusted and well-known service for software distribution.
  • [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection as it processes database model definitions from code to generate migration scripts.
  • Ingestion points: Alembic reads model definitions from the application's backend modules (specifically backend.modules.models) in alembic/env.py.
  • Boundary markers: No specific delimiters or warnings are present in the skill to treat the imported models as untrusted data.
  • Capability inventory: The skill allows for DDL (Data Definition Language) execution on the target database (e.g., adding/dropping columns and indexes) via the alembic upgrade command.
  • Sanitization: The skill relies on the standard SQLAlchemy/Alembic autogeneration logic and assumes that the source models are authoritative and safe.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 02:28 PM