data-seeding-fixtures-builder
Warn
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/reset-db.tsutilizesprisma.$executeRawUnsafeto execute dynamically generated SQLTRUNCATEcommands for all tables in the public schema by iterating through table names fetched from the system catalog.\n- [PRIVILEGE_ESCALATION]: The database reset process employs the high-privilege PostgreSQL commandSET session_replication_role = 'replica'to bypass foreign key constraints and triggers during the truncation phase, which is a powerful administrative operation.\n- [CREDENTIALS_UNSAFE]: A hardcoded password value (password123) is included in the Playwright test fixture example located intests/fixtures/e2e.fixture.tsfor simulating user authentication.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface inscripts/reset-db.tswhere database metadata (table names frompg_tables) is ingested and passed to dynamic SQL execution tools (executeRawUnsafe) without sanitization or explicit boundary markers, combined with high-privilege capabilities.
Audit Metadata