db-migrations
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for database management and testing, specifically 'bunx drizzle-kit generate', 'bun drizzle-kit migrate', and 'pgbench'. These are standard utilities used for the stated development and maintenance purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository data and environment configurations which could potentially contain untrusted input. 1. Ingestion points: Reads database schema files from 'packages/db/src/schema/', migration files from 'packages/db/drizzle/', and environment variables from '.env'. 2. Boundary markers: Absent; no specific delimiters or warnings are used when the agent processes these files. 3. Capability inventory: The skill has the ability to execute shell commands and run SQL transactions against a database branch. 4. Sanitization: The skill relies on the internal logic of the Drizzle ORM and Neon CLI tools to handle schema and configuration data safely.
Audit Metadata