alembic
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run several shell commands including
pip install,alembic init,alembic revision, andalembic upgrade. These are standard operations for the tool's intended purpose of managing database schemas in a development and production lifecycle. - [EXTERNAL_DOWNLOADS]: The skill uses
pip install alembicto fetch the Alembic package from the official Python Package Index (PyPI), which is a trusted and well-known service for software distribution. - [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection as it processes database model definitions from code to generate migration scripts.
- Ingestion points: Alembic reads model definitions from the application's backend modules (specifically
backend.modules.models) inalembic/env.py. - Boundary markers: No specific delimiters or warnings are present in the skill to treat the imported models as untrusted data.
- Capability inventory: The skill allows for DDL (Data Definition Language) execution on the target database (e.g., adding/dropping columns and indexes) via the
alembic upgradecommand. - Sanitization: The skill relies on the standard SQLAlchemy/Alembic autogeneration logic and assumes that the source models are authoritative and safe.
Audit Metadata