schema
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a static knowledge base and template generator for database design; it contains no executable logic or scripts that could compromise host security or exfiltrate data.\n- [SAFE]: It provides high-quality security guidance for multi-tenant environments, specifically mandating transaction-scoped 'set_config' calls to prevent cross-tenant data leakage in pooled connection environments.\n- [SAFE]: The core contract explicitly prohibits destructive database operations (like dropping tables or columns) without user confirmation and provides safe alternatives like the 'expand-contract' pattern.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data requirements to generate database code, which is a potential injection surface. However, this is mitigated by a structured 'Model -> Migrate -> Validate' workflow and strict anti-pattern validation gates that prevent the accidental generation of risky or invalid schema structures.
Audit Metadata