generate-migration-prerequisite-plan

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFE
Full Analysis
  • [Strict Data Minimization]: The skill and its associated contracts explicitly forbid the assistant from asking for or recording sensitive information, such as credentials, secrets, connection strings, or private keys. It uses placeholders and hashes for evidence references to prevent accidental data exposure.
  • [Local-Only Operation]: The skill logic and reference materials (catalog, knowledge base, and schemas) are entirely local. It makes no network calls during execution, which significantly reduces the risk of data exfiltration or unauthorized remote interactions.
  • [Indirect Prompt Injection Mitigation]: The skill instructions include a specific security rule to treat external knowledge base content as data only, never as instructions. This prevents potential attacks where malicious directives might be hidden within the migration data itself.
  • [Transparent Resource Handling]: The skill neutrally documents and provides links to official documentation (Microsoft Learn, Azure) and well-known services (Striim) to support the user's planning process. It also includes clear warnings and explicit opt-in requirements for archived or community samples like Smart Bulk Copy, ensuring the user is informed about the support status of their chosen tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 08:20 PM