safe-migrations
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates as a template generator that incorporates user-provided data into executable Ruby migration code, creating a surface for indirect instructions.
- Ingestion points: User prompts requesting specific migration scripts based on their database schema (e.g., table names, column names, and default values).
- Boundary markers: The provided templates do not utilize specific delimiters or instructions to isolate user-supplied identifiers from the generated logic.
- Capability inventory: The generated migrations perform database schema alterations (DDL) and data updates (DML) when executed within a Rails environment.
- Sanitization: No evidence of input validation or sanitization for user-supplied identifiers is present in the templates.
- [DYNAMIC_EXECUTION]: The skill generates complex Ruby class definitions for Active Record migrations that are intended for runtime execution within the application's migration framework.
- [COMMAND_EXECUTION]: The skill provides instructions for running command-line tools to initialize the environment, specifically the Rails generator for the strong_migrations gem.
- [EXTERNAL_DOWNLOADS]: The skill references and directs the user to documentation and repositories from reputable organizations including the Ruby on Rails project, PostgreSQL, GitLab, Shopify, and Stripe.
Audit Metadata