data-retention-archiving-planner
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
jobs/cleanup-old-data.tsemploysprisma.$executeRawUnsafeto interpolate table and column names directly into a SQL query string. This practice is risky as it bypasses parameterized query protections for identifiers, creating a potential SQL injection vector if configuration is ever dynamically generated from untrusted input. - [COMMAND_EXECUTION]: The skill provides a Bash script
scripts/migrate-to-s3.shto export database records and upload them to AWS S3. This functionality allows for shell command execution and data movement to external storage, which is a high-privilege operation aligned with the skill's purpose.
Audit Metadata