managing-database-migrations

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides comprehensive and industry-standard instructions for database schema migrations. It emphasizes safety practices such as the use of idempotency (IF NOT EXISTS), transaction wrapping (BEGIN/COMMIT), and the expand-contract pattern for zero-downtime deployments. References to external tools like Flyway, Alembic, Prisma, and gh-ost are to well-known and reputable services.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits a potential attack surface for indirect prompt injection because it processes user-provided schema requirements to generate executable scripts using powerful tools.
  • Ingestion points: In SKILL.md, instructions direct the agent to generate versioned migration files based on "user input" and a "desired schema change."
  • Boundary markers: Absent; there are no specific instructions to wrap user-provided data in delimiters or include "ignore instructions" warnings during script generation.
  • Capability inventory: According to SKILL.md, the agent is granted access to Write, Edit, and Bash execution for psql, mysql, and mongosh CLIs.
  • Sanitization: While no specific input sanitization is mentioned, the skill mandates a validation phase (Step 6) on staging databases to verify script behavior before production use.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:47 AM