database-migrations
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for processing database schema definitions and SQL migration files which represents a potential injection surface if the input files are sourced from untrusted environments.
- Ingestion points: Processes local schema definitions (
schema.prisma,src/db/schema.ts) and migration scripts (migration.sql) as documented in SKILL.md. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are included in the examples to isolate data from logic.
- Capability inventory: The skill utilizes shell command execution via
npx prisma,npx drizzle-kit, andpsqlto interact with the system and databases (SKILL.md). - Sanitization: No sanitization or validation logic is demonstrated for the schema content or SQL scripts before they are passed to the migration tools.
Audit Metadata