synapse-migration

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • Command Execution: The skill uses dotnet build and dotnet run to compile and execute a local helper tool (DedicatedPoolTool). This is used to extract schemas from SQL Server DACPAC files and is a core part of the migration process.
  • Indirect Prompt Injection: As a migration tool, the skill ingests and processes user-supplied T-SQL code and database metadata. To mitigate considerations regarding the processing of untrusted source code, the skill implements a strict multi-phase approval process, deterministic source-block auditing, and a dedicated Spark SQL parser gate (validate_dedicated_pool_spark.py) to validate generated code before it is sent to the target environment.
  • Dynamic Execution: The skill supports building and executing SQL projects provided by the user. This process is protected by an explicit --allow-trusted-project-build flag, requiring the operator to review the project source before execution, and a hard five-minute timeout.
  • External API Interaction: The skill communicates with official Microsoft endpoints including Fabric, Azure Management, and Synapse Data Plane APIs. These interactions are conducted over official channels using authenticated tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 09:28 AM