doctrine-migrations
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes entity mapping definitions and database schema to generate migration files. This ingestion of local project files represents a surface where a developer could be influenced by embedded instructions in code, though the skill explicitly mandates manual review of all generated SQL in its guardrails.
- Ingestion points: Entity mappings (
#[ORM\...]), database schema viadoctrine:migrations:diff. - Boundary markers: None identified for file processing.
- Capability inventory: Shell execution (
php bin/console), file modification (Write,Edit). - Sanitization: Relies on manual user review of generated diffs.
- [COMMAND_EXECUTION]: The instructions call for the execution of standard Symfony console commands (
php bin/console) to manage the database lifecycle andphpunitfor verifying migrations. These are executed within the local shell environment as part of the intended workflow. - [EXTERNAL_DOWNLOADS]: The skill references the installation of
doctrine/doctrine-migrations-bundleusing the Composer package manager. This is a standard package installation from a well-known vendor in the PHP ecosystem.
Audit Metadata