migration
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents a database migration workflow using standard industry tools like
node-pg-migrateanddrizzle-kit. The instructions emphasize safety practices such as manual SQL review and the use of linters to prevent destructive changes. - [COMMAND_EXECUTION]: The skill lists several
pnpmcommands (e.g.,pnpm migrate,pnpm migrate:status,pnpm migrate:generate). These are local repository scripts used for database management and do not include any patterns for unauthorized or arbitrary command execution. - [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive environment configurations were found. While the skill mentions deployment files like
deploy-dev.yml, it does not expose their content or sensitive parameters. - [REMOTE_CODE_EXECUTION]: No remote scripts are downloaded or executed. All operations are performed using local package scripts within the repository structure.
Audit Metadata