database-migrations

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx and bunx to execute the @schemavaults/dbh command-line interface. This is used for validating migration directories, building migration files, and applying or reversing database migrations.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the @schemavaults/dbh package from the NPM/Bun registries using npx and bunx at runtime.
  • [DYNAMIC_EXECUTION]: The skill describes a workflow where TypeScript source files are compiled into JavaScript modules at runtime using Bun's bundler (build-db-migrations) and subsequently executed to apply database changes (migrate).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined migration files containing code to be executed against a database. While these files are untrusted data, their execution is the primary, intended purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 02:18 PM
Security Audit — agent-trust-hub — database-migrations