synapse-migration
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- Command Execution: The skill uses
dotnet buildanddotnet runto compile and execute a local helper tool (DedicatedPoolTool). This is used to extract schemas from SQL Server DACPAC files and is a core part of the migration process. - Indirect Prompt Injection: As a migration tool, the skill ingests and processes user-supplied T-SQL code and database metadata. To mitigate considerations regarding the processing of untrusted source code, the skill implements a strict multi-phase approval process, deterministic source-block auditing, and a dedicated Spark SQL parser gate (
validate_dedicated_pool_spark.py) to validate generated code before it is sent to the target environment. - Dynamic Execution: The skill supports building and executing SQL projects provided by the user. This process is protected by an explicit
--allow-trusted-project-buildflag, requiring the operator to review the project source before execution, and a hard five-minute timeout. - External API Interaction: The skill communicates with official Microsoft endpoints including Fabric, Azure Management, and Synapse Data Plane APIs. These interactions are conducted over official channels using authenticated tokens.
Audit Metadata