migration-risk-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze SQL migration scripts provided by users. This creates a surface for indirect prompt injection where malicious instructions could be embedded within SQL comments or string literals.
- Ingestion points: User-provided SQL migration scripts and ORM migration files (Alembic, Django, Flyway) are processed during Phase 1.
- Boundary markers: The instructions do not define specific delimiters or escaping mechanisms for the input SQL content.
- Capability inventory: The skill lacks capabilities for command execution, file writing, or network operations. Its primary function is text analysis and report generation, which significantly limits the impact of any potential injection.
- Sanitization: No explicit sanitization or filtering of SQL comments is implemented; however, the skill's focus on structured analysis (Lock Risk, Duration, Rollback) acts as a natural constraint on how input is interpreted.
- [SAFE]: The skill contains comprehensive safety guidelines, such as the "Rationalizations" and "Calibration Rules" sections, which direct the agent to prioritize safety and over-estimate risk when data is missing. It also explicitly forbids the execution of migrations, stating "this skill assesses risk, it doesn't run migrations."
Audit Metadata