managing-database-migrations
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides comprehensive and industry-standard instructions for database schema migrations. It emphasizes safety practices such as the use of idempotency (IF NOT EXISTS), transaction wrapping (BEGIN/COMMIT), and the expand-contract pattern for zero-downtime deployments. References to external tools like Flyway, Alembic, Prisma, and gh-ost are to well-known and reputable services.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a potential attack surface for indirect prompt injection because it processes user-provided schema requirements to generate executable scripts using powerful tools.
- Ingestion points: In
SKILL.md, instructions direct the agent to generate versioned migration files based on "user input" and a "desired schema change." - Boundary markers: Absent; there are no specific instructions to wrap user-provided data in delimiters or include "ignore instructions" warnings during script generation.
- Capability inventory: According to
SKILL.md, the agent is granted access toWrite,Edit, andBashexecution forpsql,mysql, andmongoshCLIs. - Sanitization: While no specific input sanitization is mentioned, the skill mandates a validation phase (Step 6) on staging databases to verify script behavior before production use.
Audit Metadata