database-migrations
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill establishes patterns for managing database migrations by interacting with external project data such as schemas and migration scripts. This processing of untrusted external content represents a surface for indirect prompt injection.
- Ingestion points: Database schema definitions (Prisma, Drizzle, Django models) and SQL migration files referenced throughout the instructions in SKILL.md.
- Boundary markers: There are no instructions for the agent to use specific delimiters or to disregard potential instructions embedded within the user's migration or schema files.
- Capability inventory: The skill involves executing shell commands via framework CLI tools including Prisma, Drizzle, Django, and golang-migrate (SKILL.md).
- Sanitization: The instructions do not include steps for the agent to validate or sanitize the content of the files before processing or executing related migration commands.
Audit Metadata