The Agent Skills Directory

[Command Execution]: The skill invokes external binaries, specifically SqlPackage.exe and sqlcmd.exe, to perform database export and import operations. It utilizes ArgumentList in PowerShell to pass parameters as individual process arguments, which is a recommended practice to prevent command injection.
[External Package Installation]: The skill provides an option to install the sqlcmd utility via winget install sqlcmd if it is not found on the system. This utilizes a well-known package management service from the vendor to ensure required prerequisites are available.
[Dynamic Script Loading]: The skill dynamically loads its own helper scripts, such as bacpac-checkpoint.ps1 and bacpac-command-helpers.ps1, using a computed path. This approach allows the skill to maintain modular logic across its distributed reference files.
[Indirect Prompt Injection]: The skill ingests database names from the source SQL Server and uses these strings in filesystem operations and as command parameters.
Ingestion points: Database names are retrieved via discovery queries from the source SQL instance.
Boundary markers: The skill implements validation logic to check for invalid Windows filename characters and reserved names before processing.
Capability inventory: The skill possesses the capability to create directories and execute command-line tools with parameters derived from external data.
Sanitization: Explicit filtering and validation of database names against a set of illegal characters and reserved words are performed during the manifest creation phase.
[Data Protection]: A dedicated function, Protect-SensitiveText, is used to redact sensitive patterns (like JWTs, bearer tokens, and account keys) from logs and terminal output, reducing the risk of accidental credential exposure.

sql-bacpac-to-azure-sql-db-migration