schema-consistency-checker
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes database schema metadata (table and column names) to generate audit reports and migration scripts. While this introduces an attack surface where malicious schema names could influence generated output, it is a standard characteristic of database management tools.
- Ingestion points: audit-schema.ts (lines 59-69, 131-137).
- Boundary markers: Absent.
- Capability inventory: SQL command generation in fix-schema.ts (lines 208-228).
- Sanitization: Partial identifier quoting in ALTER TABLE templates.
- [DYNAMIC_EXECUTION]: The skill dynamically generates SQL ALTER TABLE and CREATE INDEX commands by interpolating schema identifiers into string templates. This functionality is intended for creating database migrations and does not pose a risk in its current implementation.
Audit Metadata