migration-architect
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external database schemas and migration specifications through its core scripts, which can influence the agent's output and recommendations.\n
- Ingestion points: The scripts
migration_planner.pyandcompatibility_checker.pyingest JSON data from files likesample_database_migration.jsonand schema definitions.\n - Boundary markers: The skill does not define explicit delimiters or instructions to treat data from these ingestion points as untrusted, which could allow instructions embedded in schemas to affect the agent's behavior.\n
- Capability inventory: The tools are restricted to local file reading and writing. They do not possess autonomous network access or the ability to execute arbitrary shell commands.\n
- Sanitization: The scripts parse the input files as structured JSON but do not perform sanitization or filtering on the text content of the fields to prevent natural language instruction injection.
Audit Metadata