Database Seeding
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The documentation and code examples for the
CoreAdminUserSeedercontain a hardcoded passwordadmin123!. While intended for development environments, hardcoded credentials pose a risk if the seeder is executed in a production context. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute local scripts (./scripts/dev.sh) and Artisan commands, which are standard for the described development workflow. - [PROMPT_INJECTION]: The skill documents patterns for ingesting and seeding data, which represents a potential surface for indirect prompt injection attacks.
- Ingestion points: Seeder logic within the
database/seeders/directory. - Boundary markers: None identified.
- Capability inventory:
Bash,Read,Write,Edit,Glob, andGreppermissions allow for significant system and file access. - Sanitization: No input validation or sanitization mechanisms are specified for the data being seeded.
Audit Metadata