db-migration-postgres-mysql

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing pgloader via Homebrew and adding Ruby gems such as trilogy and mysql2. These are standard tools and well-known packages in the Rails ecosystem.
  • [COMMAND_EXECUTION]: Shell commands are provided for auditing the schema (grep) and running the migration tool (pgloader). These operations are appropriate for the skill's purpose and do not involve suspicious execution patterns.
  • [CREDENTIALS_UNSAFE]: The migration configuration includes database connection strings. The skill correctly uses placeholders (user:pass@source-host) for these credentials, adhering to standard security practices for documentation.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies schema features by searching local project files.
  • Ingestion points: The agent is instructed to read db/structure.sql using a grep command.
  • Boundary markers: The command uses specific regex patterns to filter content.
  • Capability inventory: The skill has the ability to execute shell commands (grep, pgloader) and write local configuration files.
  • Sanitization: No sanitization is performed on the file content, but the data is not used to construct new prompts or executable scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 02:26 AM