db-migrate
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes native database migration CLI tools such as Alembic, Prisma, Knex, Django, and Rails. This behavior is the intended functionality of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill reads migration files from the local file system to validate them for destructive commands or best practices. This creates a potential surface for indirect prompt injection if those files contain malicious instructions. • Ingestion points: Reads migration files during the validation phase in Phase 3. • Boundary markers: No explicit boundary markers or content isolation techniques are mentioned. • Capability inventory: Executes framework-specific CLI commands and performs file system write operations. • Sanitization: No sanitization of the migration file content is described before processing.
- [DYNAMIC_EXECUTION]: The skill can automatically generate and append code to migration files to fix identified issues, such as missing rollback functions or missing index creations. This is handled using local templates and logic.
Audit Metadata