liquibase-migration
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Liquibase XML schema (XSD) from https://www.liquibase.org within its changelog examples for validation purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template for processing user-supplied database change requests to generate migration code. (1) Ingestion points: User instructions regarding database migrations, schema changes, and table/column names. (2) Boundary markers: The guidelines do not define specific delimiters or instructions for the agent to ignore potentially malicious embedded content. (3) Capability inventory: The skill facilitates the generation of XML changelogs and SQL migration scripts. (4) Sanitization: The instructions do not explicitly mandate the sanitization of user-provided identifiers before interpolation.
- [NO_CODE]: The skill consists exclusively of instructional Markdown and XML/SQL code snippets. It does not contain any executable scripts, binaries, or automated installation commands.
Audit Metadata