convex-migration-helper
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates migration strategies and code based on user-provided schema definitions and data shapes. This presents an attack surface where malicious input could influence the agent's logic or code generation. \n- Ingestion points: User-supplied schema code and database structure descriptions provided in the chat context. \n- Capability inventory: The skill facilitates the generation of database mutation code (patch, delete, insert) and shell commands (
npx convex run) meant for execution in the user's development environment. \n- Boundary markers: No specific boundary markers are defined for the user's schema input to prevent the agent from following instructions embedded within the data. \n- Sanitization: No validation or sanitization of the input schema data is performed. \n- [EXTERNAL_DOWNLOADS]: The skill references and suggests installing the@convex-dev/migrationspackage, which is an official and trusted component of the Convex platform for managing data migrations.
Audit Metadata