schema

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill serves as a static knowledge base and template generator for database design; it contains no executable logic or scripts that could compromise host security or exfiltrate data.\n- [SAFE]: It provides high-quality security guidance for multi-tenant environments, specifically mandating transaction-scoped 'set_config' calls to prevent cross-tenant data leakage in pooled connection environments.\n- [SAFE]: The core contract explicitly prohibits destructive database operations (like dropping tables or columns) without user confirmation and provides safe alternatives like the 'expand-contract' pattern.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data requirements to generate database code, which is a potential injection surface. However, this is mitigated by a structured 'Model -> Migrate -> Validate' workflow and strict anti-pattern validation gates that prevent the accidental generation of risky or invalid schema structures.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 06:56 AM
Security Audit — agent-trust-hub — schema