database-migrations
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npxandbunxto execute the@schemavaults/dbhcommand-line interface. This is used for validating migration directories, building migration files, and applying or reversing database migrations. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the
@schemavaults/dbhpackage from the NPM/Bun registries usingnpxandbunxat runtime. - [DYNAMIC_EXECUTION]: The skill describes a workflow where TypeScript source files are compiled into JavaScript modules at runtime using Bun's bundler (
build-db-migrations) and subsequently executed to apply database changes (migrate). - [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined migration files containing code to be executed against a database. While these files are untrusted data, their execution is the primary, intended purpose of the skill.
Audit Metadata