db-migration-postgres-mysql
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
pgloadervia Homebrew and adding Ruby gems such astrilogyandmysql2. These are standard tools and well-known packages in the Rails ecosystem. - [COMMAND_EXECUTION]: Shell commands are provided for auditing the schema (
grep) and running the migration tool (pgloader). These operations are appropriate for the skill's purpose and do not involve suspicious execution patterns. - [CREDENTIALS_UNSAFE]: The migration configuration includes database connection strings. The skill correctly uses placeholders (
user:pass@source-host) for these credentials, adhering to standard security practices for documentation. - [INDIRECT_PROMPT_INJECTION]: The skill identifies schema features by searching local project files.
- Ingestion points: The agent is instructed to read
db/structure.sqlusing agrepcommand. - Boundary markers: The command uses specific regex patterns to filter content.
- Capability inventory: The skill has the ability to execute shell commands (
grep,pgloader) and write local configuration files. - Sanitization: No sanitization is performed on the file content, but the data is not used to construct new prompts or executable scripts.
Audit Metadata