313-frameworks-spring-db-migrations-flyway

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard Maven commands such as ./mvnw compile and ./mvnw clean verify to ensure the project is in a valid state before and after applying database migrations. These commands are fundamental to the Java development workflow and are used safely here for verification purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify SQL and Java migration scripts, which are untrusted external inputs. While this presents an attack surface for indirect prompt injection, the risk is inherent to the skill's primary function and is mitigated by guidance requiring human review for breaking changes. 1. Ingestion points: Flyway migration scripts in src/main/resources/db/migration. 2. Boundary markers: Not explicitly defined. 3. Capability inventory: File modification and shell command execution. 4. Sanitization: The skill mandates manual review for destructive schema or data changes.
  • [DYNAMIC_EXECUTION]: The skill supports the creation of Java-based migrations (BaseJavaMigration). These migrations allow programmatic execution of database statements during application startup. This is a standard and documented feature of the Flyway migration framework, and the examples provided follow best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 08:20 PM