flyway-migration
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured guidance for creating database migration files using Flyway. It encourages safe practices such as using specific data types (TIMESTAMPTZ, UUID), idempotent migrations, and concurrent index creation to avoid table locking during production updates.
- [SAFE]: The provided Kotlin test example uses Testcontainers with a standard 'postgres:15-alpine' image from a well-known registry. This is a standard and secure practice for verifying database migrations in local and CI environments.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it requires the agent to read and process existing project files (SQL migrations and NAIS manifests) to determine the correct context for new tasks.
- Ingestion points: Search and read operations on files within 'src/main/resources/db/' and the NAIS manifest directories.
- Boundary markers: Absent; the agent is not instructed to use delimiters or specific safety markers when processing ingested file content.
- Capability inventory: The skill utilizes agent capabilities for file search, content reading, and file creation/modification within the local repository.
- Sanitization: No explicit sanitization or validation of the content from the ingested files is described, though the output is focused on generating SQL code.
Audit Metadata