database-migration
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes processes for transforming database records, which serves as an ingestion point for potentially untrusted data. \n
- Ingestion points: Database records referenced in transformations (e.g., 'SELECT id, address_string FROM users' in SKILL.md). \n
- Boundary markers: Absent; there are no instructions to differentiate data content from system instructions. \n
- Capability inventory: Shell command execution (npx, npm), file system access for scripts, and database write permissions. \n
- Sanitization: Code examples demonstrate the use of parameterized queries which is a best practice to mitigate SQL injection. \n- [COMMAND_EXECUTION]: The skill provides instructions for executing database migration CLI tools. \n
- Evidence: Command strings for 'npx sequelize-cli', 'npm run typeorm', and 'npx prisma'. \n
- Context: These operations are consistent with the skill's primary purpose and utilize well-known developer tooling.
Audit Metadata