migrate
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted SQL migration files and schema definitions, creating a potential surface for indirect prompt injection.
- Ingestion points: Migration files and schema paths provided via arguments in SKILL.md.
- Boundary markers: No explicit delimiters or 'ignore' instructions are used to isolate processed SQL from the agent's instructions.
- Capability inventory: Executes
scripts/schema-diff.mjsand utilizesBashandTasktools. - Sanitization: Includes a safety protocol requiring users to confirm destructive steps by typing the name of the affected object verbatim, and instructs the agent to redact secrets from findings.
- [COMMAND_EXECUTION]: The skill invokes a local script
scripts/schema-diff.mjsusing Node.js to calculate schema differences. This is a functional requirement of the tool's intended use case and utilizes vendor-provided scripts.
Audit Metadata