analyze-database
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary functionality is restricted to reading local project configuration files (SQL schemas, ORM models, migration files) and writing markdown reports to a specific internal directory (.workflow/analyze/).- [SAFE]: No network operations, external downloads, or remote code execution patterns were identified in the workflow or instructions.- [SAFE]: The skill adheres to a read-only principle for the database and focuses on structural analysis and documentation.- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface (Category 8) as it processes untrusted data from project files to generate reports.
- Ingestion points: SQL schema files, migration files, and ORM model definitions (SKILL.md, Step 2).
- Boundary markers: Absent; the instructions do not specify delimiters to isolate ingested data from the agent's instructions.
- Capability inventory: Read file access and local file write access for report generation.
- Sanitization: No sanitization or validation of schema content is specified before processing.
Audit Metadata