database-migration
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and architectural patterns for database migrations. All code snippets are illustrative examples.
- [CREDENTIALS_UNSAFE]: While the static analyzer flagged hardcoded connection strings in
references/migration-strategies.md, these are generic placeholders (e.g.,postgres://$(DB_USER):$(DB_PASS)@$(DB_HOST)) or local/test examples (e.g.,postgres://old-db:5432/myapp) used for documentation purposes. The skill explicitly instructs users to store real credentials in AWS Secrets Manager or Vault. - [EXTERNAL_DOWNLOADS]: The CI/CD examples in
SKILL.mdshow downloads of standard tools like Flyway from Maven Central (repo1.maven.org). These are neutral, well-known technical repositories and are used according to standard development workflows. - [COMMAND_EXECUTION]: The skill contains example commands for database tools (e.g.,
pg_dump,flyway,gh-ost). These are provided as usage documentation for the agent to help the user, with no evidence of hidden or malicious execution patterns. - [PROMPT_INJECTION]: No attempts to override system instructions or bypass safety filters were detected in the markdown or metadata.
Audit Metadata