java-flyway-migrations
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute project-documented startup commands or Spring context paths to validate migrations after they are added or modified.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (existing migration files and user-provided schema requirements), which creates a vulnerability surface for indirect prompt injection attacks.\n
- Ingestion points: Project database migration files and natural language descriptions of requested schema changes.\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded directives are provided for handling untrusted input.\n
- Capability inventory: Includes file system write access for generating .sql files and shell command execution for migration validation (SKILL.md).\n
- Sanitization: No sanitization or validation logic is defined within the skill to filter potentially malicious SQL or instructions.
Audit Metadata