database-migration
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided descriptions to generate and execute database migration scripts.
- Ingestion points: User-provided descriptions of schema changes (e.g., 'add a phone_number column') used in the migration generation workflow.
- Boundary markers: Absent; the instructions do not define delimiters to separate user input from the system's generation logic.
- Capability inventory: Execution of migration tools such as Alembic, Prisma, and Knex, which involve shell command execution and database schema modification.
- Sanitization: The workflow relies on manual human review and staging tests but does not include automated sanitization of the user input or the resulting SQL/code.
- [DYNAMIC_EXECUTION]: The skill generates and executes migration scripts in Python and SQL at runtime based on the requested schema changes.
Audit Metadata