Database Seeding

Pass

Audited by Gen Agent Trust Hub on Aug 16, 2026

Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: The documentation and code examples for the CoreAdminUserSeeder contain a hardcoded password admin123!. While intended for development environments, hardcoded credentials pose a risk if the seeder is executed in a production context.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute local scripts (./scripts/dev.sh) and Artisan commands, which are standard for the described development workflow.
  • [PROMPT_INJECTION]: The skill documents patterns for ingesting and seeding data, which represents a potential surface for indirect prompt injection attacks.
  • Ingestion points: Seeder logic within the database/seeders/ directory.
  • Boundary markers: None identified.
  • Capability inventory: Bash, Read, Write, Edit, Glob, and Grep permissions allow for significant system and file access.
  • Sanitization: No input validation or sanitization mechanisms are specified for the data being seeded.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 16, 2026, 01:29 AM
Security Audit — agent-trust-hub — Database Seeding