convex-migration-helper

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill generates migration strategies and code based on user-provided schema definitions and data shapes. This presents an attack surface where malicious input could influence the agent's logic or code generation. \n- Ingestion points: User-supplied schema code and database structure descriptions provided in the chat context. \n- Capability inventory: The skill facilitates the generation of database mutation code (patch, delete, insert) and shell commands (npx convex run) meant for execution in the user's development environment. \n- Boundary markers: No specific boundary markers are defined for the user's schema input to prevent the agent from following instructions embedded within the data. \n- Sanitization: No validation or sanitization of the input schema data is performed. \n- [EXTERNAL_DOWNLOADS]: The skill references and suggests installing the @convex-dev/migrations package, which is an official and trusted component of the Convex platform for managing data migrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 06:15 PM