database-migration

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides educational content and architectural patterns for database migrations. All code snippets are illustrative examples.
  • [CREDENTIALS_UNSAFE]: While the static analyzer flagged hardcoded connection strings in references/migration-strategies.md, these are generic placeholders (e.g., postgres://$(DB_USER):$(DB_PASS)@$(DB_HOST)) or local/test examples (e.g., postgres://old-db:5432/myapp) used for documentation purposes. The skill explicitly instructs users to store real credentials in AWS Secrets Manager or Vault.
  • [EXTERNAL_DOWNLOADS]: The CI/CD examples in SKILL.md show downloads of standard tools like Flyway from Maven Central (repo1.maven.org). These are neutral, well-known technical repositories and are used according to standard development workflows.
  • [COMMAND_EXECUTION]: The skill contains example commands for database tools (e.g., pg_dump, flyway, gh-ost). These are provided as usage documentation for the agent to help the user, with no evidence of hidden or malicious execution patterns.
  • [PROMPT_INJECTION]: No attempts to override system instructions or bypass safety filters were detected in the markdown or metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 05:20 PM
Security Audit — agent-trust-hub — database-migration