migrate-validate
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill suggests the use of the
@claude-flow/clipackage vianpx. This package is used to query validation results and appears to be a functional component of the workflow associated with the provided MCP tools. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool and provides a CLI example for searching migration results. These operations are restricted to the purpose of managing and auditing database migrations. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it reads and parses external SQL files (
.up.sqland.down.sql). - Ingestion points: Migration files are loaded using the
Readtool. - Boundary markers: None are explicitly defined in the instructions to separate data from instructions.
- Capability inventory: The agent has access to
Bashand severalmcp__claude-flow__*tools for data storage and retrieval. - Sanitization: No specific sanitization or validation of the SQL content as text is described beyond structural checks.
Audit Metadata