managing-database-tests
Warn
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_test_data.pyimplements a script generation feature that creates executable files on the local system. - The
generate_scriptmethod (lines 53-73) interpolates a user-providedtemplatestring directly into a bash script template. - The method uses
file_path.chmod(0o755)to grant execution permissions to the generated file, enabling the creation and potential execution of arbitrary shell commands if the input is not sanitized. - [SAFE]: External references and tool integrations follow best practices for developer-oriented skills.
- The skill references well-known technology providers including Prisma, SQLAlchemy, and Knex for documentation and package management.
- Hardcoded credentials in
assets/docker-compose.ymlare clearly scoped for local test environments (e.g.,POSTGRES_PASSWORD: test_password) and do not represent a leakage of production secrets.
Audit Metadata